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B2.95 TCR_EL2, Translation Control Register, EL2 ..........::cccccsscscceecssessneesessesnseseeseeens B2-281 
B2Z96: -TCRJELS: Translation Control Register, ELS ssessiasa x vgereraacseidsabeadeegiecaaeaeecneeatesd B2-282 
B2.97 TTBRO_EL1, Translation Table Base Register 0, EL ..........1c:sccccescsseeceseessenneees B2-283 
B2.98 TTBRO_EL2, Translation Table Base Register 0, EL2 u.........1c:scccccccssceeeeesnenneees B2-284 
B2.99 TTBRO_EL3, Translation Table Base Register 0, ELS .........sccsscccee ceeeeentteeeeeeees B2-285 
B2.100 TTBR1_EL1, Translation Table Base Register 1, EL ..........:::::cccccsseceeesseesesneees B2-286 
B2.101 TTBR1_EL2, Translation Table Base Register 1, EL2 ..........:::::ccccccsseensesseesesneees B2-287 
B2.102 VDISR_EL2, Virtual Deferred Interrupt Status Register, EL2 ........c. cee B2-288 
B2.103 VSESR_EL2, Virtual SError Exception Syndrome ReGister .........:0cc0 cece B2-289 
B2.104 VTCR_EL2, Virtualization Translation Control Register, EL2 ........ccccecseeeee B2-290 
B2.105 VTTBR_EL2, Virtualization Translation Table Base Register, EL2 .....00... cece B2-291 
Chapter B3 Error system registers 
Bod. EnfOr SY Stent FEGISLOF: SUNNTIALY siscedesiedcuiast oonesaeneiaecdiagasd dnadd oaenpaneaiaaer ae eaieeuaei ead B3-294 
B3:2 ERROADDR, Error Record Address ReQister ...........:::ccccccscsce caeeceeseesteseessesnenee B3-295 
B3is ERROGTER, Error Record: GontrolROGISUCM ccces: zsseccecias vachavecsasaaieeceeiavanaciabiataiacens B3-296 
B3.4 ERROFR, Error Record Peature: REGISUCM sess ciziscaucsatavicensanabaccateateadardseasaolaracsanen B3-298 
B3.5 ERROMISCO, Error Record Miscellaneous ReGISICS O ....-.0:.-ccvessezececesceeeses scenes B3-300 
B3.6 ERROMISC1, Error Record Miscellaneous Register 1 ........2:::::ccccccceeeeseeeeeteeenenee B3-303 
B3.7 > ERROPFGCDNR, Error Pseudo Fault Generation Count Down Register ..... ....- B3-304 
B3.8 ERROPFGCTLR, Error Pseudo Fault Generation Control Register .............:.0++ B3-305 
B3.9 ERROPFGFR, Error Pseudo Fault Generation Feature Register ...........:::::::0000 B3-307 
B3.10 ERROSTATUS, Error Record Primary Status Register .....0...ccccccee ceeeeeeeeeeneee B3-309 
Chapter B4 GIC registers 

BAS CPU IRTOIMACE TOOISLORS xcs: cies cau oececsracenc ce tit cmecctatte cape acta etna me B4-315 
B4.2. AArch64 physical GIC CPU interface system register SUMIMALY .........000ceceeeeee B4-316 
B4.3_  ICC_APORO_EL1, Interrupt Controller Active Priorities Group O Register 0, EL7 .... 

deatscatedsasiscedesSoae2 eg hciecssctonsstedas tans’ aalatdasae da boevaaccassaedaden teen dentzansiendunsacevasssd¥et endeeadeddemei B4-317 
B4.4 ICC_AP1R0_EL1, Interrupt Controller Active Priorities Group 1 RegisterO EL1 B4-318 
B4.5  ICC_BPRO_EL1, Interrupt Controller Binary Point Register 0, EL ...... cee B4-319 
B4.6 ICC_BPR1_EL1, Interrupt Controller Binary Point Register 1, EL1 ...... cece B4-320 
B4.7_ = ICC_CTLR_EL1, Interrupt Controller Control Register, EL .....ccee ceeeeeeeees B4-321 
B4.8 ICC_CTLR_EL3, Interrupt Controller Control Register, EL3 u....cee ceceeeeeeee B4-323 
B4.9 ICC_SRE_EL1, Interrupt Controller System Register Enable Register, EL1 ...... B4-325 
B4.10 ICC_SRE_EL42, Interrupt Controller System Register Enable register, EL2... ... B4-326 
B4.11 ICC_SRE_EL3, Interrupt Controller System Register Enable register, EL3... ... B4-328 
B4.12 AArch64 virtual GIC CPU interface register SUMIMALY oo... eeecetteeteteettteeteneeees B4-330 
B4.13 ICV_APORO_EL1, Interrupt Controller Virtual Active Priorities Group O Register 0, 

FET cesieastintecarasiasleapsscansspudusaccdobedesisasmaripetenestasaisssdvegeisenavintaseuatenuveiaxassieugslsuaPeenes B4-331 
B4.14. ICV_AP1R0_EL1, Interrupt Controller Virtual Active Priorities Group 1 Register 0, 

BED Tisese Tuscteraag ere easentes sudetaatpeants emisoaceatag seasons seaeantaee rae tess alachinss aainasea ca baxaprissestee igen B4-332 
B4.15 ICV_BPRO_EL1, Interrupt Controller Virtual Binary Point Register 0, EL7........ B4-333 
B4.16 ICV_BPR1_EL1, Interrupt Controller Virtual Binary Point Register 1, EL7........ B4-334 
B4.17 ICV_CTLR_EL1, Interrupt Controller Virtual Control Register, EL... B4-335 
B4.18 AArch64 virtual interface control system register SUMIMALY ........:ccc cette entees B4-337 
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B4.19 


ICH_APORO_EL2, Interrupt Controller Hyp Active Priorities Group 0 Register 0, EL2.... 





supesaasaacann ie poco sc oee eee. sepeade iata eae eesateece nes eeea oes oes een ee ede ee GES B4-338 
B4.20 ICH_AP1R0_EL2, Interrupt Controller Hyp Active Priorities Group 1 Register 0, EL2.... 
Rass es i ahas axe Seance ses ideeesa aes ae caee uae toe lataGseaused ectee as coal cas aes aeoeceeaeadeeetaaretaediy a asta? B4-339 
B4.21 ICH_HCR_EL2, Interrupt Controller Hyp Control Register, EL2 ........c.. cee B4-340 
B4.22 ICH_VMCR_EL42, Interrupt Controller Virtual Machine Control Register, EL2 .... B4-343 
B4.23, ICH_VTR_EL2, Interrupt Controller VGIC Type Register, EL2 ......cccc cee B4-345 
Chapter B5 Advanced SIMD and floating-point registers 
Bost) AAKCn6S feCister SUMIMAIY: 5 coe Stee sess sta cats sist aie haetaetn puerta das ievbadtbeestcacttie ods B5-348 
B5.2 FPGR, Floating-point Control ROGISICR «icicc.:.scocccecuseseo3s iecedoeccesscabueseecdideodieseeecenee B5-349 
BS.3 FPSR, Floating-point Slatus ReGISlCM ..::.cci.ccccscsesscsceiebsend aectietonee steed eensbvecdeedess B5-351 
B5.4 MVFRO_EL1, Media and VFP Feature Register 0, EL1 ............::::ccccsssesseeceeerenee B5-353 
BS:5 MVFR1_EL1, Media and VFP Feature Register 1, EL1 .........2..:::sccccsssesseeceeerenee B5-355 
B5.6 MVFR2_EL1, Media and VFP Feature Register 2, ELT ....c.ssccsscncssesssseseosesececsees B5-357 
Bo? - AAKCHS2 KeGister SUMIMANY wis isute 53 s:anteteaecteiesaessiasaaeovsaeGamuecsenied veaesnatinaasemean aoa B5-359 
B5.8 FPSCR, Floating-Point Status and Control Register ......0ccccesse ceeeneeeneeerenee B5-360 
Part C Debug descriptions 
Chapter C1 Debug 
Ci. ~“ABOUE CEDUGINOIROOS 25x60 aasscacedsteah ac tiree rome eeee aH Pata eae Tate C1-368 
C12” ‘Debug TeOISteN INEM ACES cris: ssescan ae ascasaacesaedancsincdateaesde swear viaaetigus at ehiaanaodeaeiaads C1-369 
Cid? ADODUG CVGIIS: cps scccsecatcsoaectcas care daeeans quad con co aaaasneeaseauanrioasan ease waa theese C1-371 
Ci4: JExternal debug: Inlenmace sz. cirssavadeassscasiseatisaaniaiaasvadesatedientestaacenasoree eseeneaaedss C1-372 
Chapter C2 Performance Monitor Unit 
C24 “AbOutthe: PMY ssccscsessececatiese nasieae see sieatiaaes iene ede eee C2-374 
G22 (PMU TanclOnal GOSCHDUON ec sic ccstessecsetcsestsaeceisaccecd Hee. Soueey wocdbaescteseaets oeaedeNeraeeese C2-375 
G23 (PMU OV nats areca cas airs cccnel tens eae oistes hk dele aac ae C2-376 
C24 IPMUSITGRE BES: ice seavcecaec ae aiaraiegesiigisctes eat aa eee I C2-385 
C25 vEXpOninoHP MU OVGIts zs scakeascsatsacesestnds OuGsiecdonreindaas aebeatans as caaaceradaesaaonyeseoeess C2-386 
Chapter C3 Activity Monitor Unit 
SA PUDONG) ace cae Seta cs ea Se teh eos wh Sls De Saeed as Saath deecees C3-388 
Cae ACCESSING TNO ACHVILY MONNOIS saniiisectcovcrisce seh ustetehetices oeetdeses ce acbertinstth oni ethos C3-389 
CBB AMO COURTCIS arccsesec reteset aks GA ode AG Sean anaes ea elabeaneeeaee C3-390 
C34 -AMU OVENS acces px cat iccer seit inde Sa Sik alah Hee LRM AA C3-391 
Chapter C4 Embedded Trace Macrocell 
Ca AROUTIRGIEIM lecpinscccsesipitepiciceie aig eee nena C4-394 
C4.2 ETM trace unit generation OptionS ANd reSOUICES ....... cece neeee neeeeenteetnneenennees C4-395 
C43. EM trace unit Tunctional GOSCHPUO I: a vissceks ceaza cosazceccbcnschetee ded sels crtazecntestbacssianeedd C4-397 
CAA. NROSOMMO MMC ETM co iicccsekes ts ce satea atte Rese ccte eas Bese ise lathes dosdbasttes te dean teastbentanecetes C4-398 
C4.5 Programming and reading ETM trace unit reQiSters .......c cc eeeee etter eeeneeeee C4-399 
C46, EMM trace unit regisler intima Ces sic.cz ic -ancstsscnclacetatecaassthe bevabe cosestseeestieviabezialiesess C4-400 
G4.7 Interaction withthe PMU and DeDUG jsciciccessscssccteceseccdinscsk ast ecetactoheesecedtescnieneobees C4-401 
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Debug registers 





Chapter D1 AArch32 debug registers 
Diy AAKChE2 GebUGINEGISLOr SUMIMALY s2:ceiartcsdaxcsdasicmaccscseisnanktobsantesesaesensniaeiaserwanteds D1-406 
Chapter D2 AArch64 debug registers 
D2.1 AArch64 debug TeGISLE® SUMIMALY se.ccisecorse ccc sonsscsgetcerse cet consdeeeevecsotecdeneouseensoesis D2-408 
D2.2 ©DBGBCRn_EL1, Debug Breakpoint Control Registers, EL1 wi... secre D2-410 
D2.3. DBGCLAIMSET_EL1, Debug Claim Tag Set Register, EL1 ...... eee cesses D2-413 
D2.4. DBGWCRn_EL1, Debug Watchpoint Control Registers, EL1 w......eeccee cesses D2-414 
Chapter D3 Memory-mapped debug registers 
D3.1 Memory-mapped debug register SUMIMATY ....:..0:c.0:sccsseneetsece steeonessstencssacsernseenes D3-418 
D3.2 EDCIDRO, External Debug Component Identification Register 0 ........60. cee D3-422 
D3.3. EDCIDR1, External Debug Component Identification Register 1 ........00. eee D3-423 
D3.4 EDCIDR2, External Debug Component Identification Register 2 ........00. cee D3-424 
D3.5 EDCIDR3, External Debug Component Identification Register 3 ........10. cece D3-425 
D3.6 EDDEVID, External Debug Device ID ROGISICM O x22. cscccis.tecoesieed secdiererescstecesonaes D3-426 
D3.7 EDDEVID1, Extemal Debug Device: ID ReGISIOR T o.c.cceccssconssicced cosienereecniersotees D3-427 
D3.8 EDPIDRO, External Debug Peripheral Identification Register 0 .........::c:ecee D3-428 
D3.9 EDPIDR1, External Debug Peripheral Identification Register 1 .........0 cece D3-429 
D3.10 EDPIDR2, External Debug Peripheral Identification Register 2 .........ccccccee D3-430 
D3.11_ EDPIDR3, External Debug Peripheral Identification Register 3 .........: cece D3-431 
D3.12 EDPIDR4, External Debug Peripheral Identification Register 4 .........cceeee D3-432 
D3.13 EDPIDRn, External Debug Peripheral Identification Registers 5-7 0.0.0.0... ::.008 D3-433 
D3.14. EDRCR, External Debug Reserve Control ReQiSt€P 0.0.00. ccccece ceeneeeneeenennees D3-434 
Chapter D4 AArch32 PMU registers 
D4.1 . AArch32 PMU TEGISter SUMIMANY science isecnisesiecrconsscnectceroes teeonsecurs viens tecctseesenendocsie D4-436 
D4.2 | PMCEIDO, Performance Monitors Common Event Identification Register 0 ...... D4-438 
D4.3. PMCEID1, Performance Monitors Common Event Identification Register 1 ...... D4-441 
D4.4 PMCR, Performance Monitors Control ReQiStCP ........:::ccccccccccce ceseeneeeeeseenteaneees D4-443 
Chapter D5 AArch64 PMU registers 
DS <AArchO4 PMU fEGISIOl SUIMMMANY seiezsteesbsdesceccs seeeses ates tcetienedssecuansacsbieatchaleatdentneste D5-448 
D5.2 ©PMCEIDO_ELO, Performance Monitors Common Event Identification Register 0, ELO.. 
ssi dausbadeaeadaigtas gastenceusaangouseseeteganddbcanands esueuutieveseqeseseesavielepensdeesegbasreetertesecaeeereeaddessosees D5-450 
D5.3  PMCEID1_ELO, Performance Monitors Common Event Identification Register 1, ELO.. 
sidsuacdgewSadaceasoastenceseecepdunteeuuesaliaenceageas qaeesut tees eugene Gdacacadsepsnevvesegsdeaustuacsesuerecnedmonseaseed D5-453 
D5.4 PMCR_ELO, Performance Monitors Control Register, ELO ....... cesses D5-455 
Chapter D6 Memory-mapped PMU registers 
D6.1 Memory-mapped PMU register SUMMALY ........:-ccc2.::ccsesnesssee seteeonsesssenesszonetnenenes D6-458 
D6.2 PMCFGR, Performance Monitors Configuration Register .......00::ccccceeeeeeenee D6-462 
D6.3 PMCIDRO, Performance Monitors Component Identification Register 0 ............ D6-463 
D6.4 PMCIDR7, Performance Monitors Component Identification Register 1 ............ D6-464 
D6.5 PMCIDR2, Performance Monitors Component Identification Register 2 ............ D6-465 
D6.6 PMCIDR3, Performance Monitors Component Identification Register 3 ............ D6-466 
D6.7 ~PMPIDRO, Performance Monitors Peripheral Identification Register 0 .............. D6-467 
D6.8 PMPIDR1, Performance Monitors Peripheral Identification Register 1 .............. D6-468 
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D6.9 PMPIDR2, Performance Monitors Peripheral Identification Register 2 .............. 





D6.10 PMPIDR3, Performance Monitors Peripheral Identification Register 3 .............. D6-470 
D6.11 PMPIDR4, Performance Monitors Peripheral Identification Register 4 .............. D6-471 
D6.12 PMPIDRn, Performance Monitors Peripheral Identification Register 5-7 ..... ..... D6-472 
Chapter D7 PMU snapshot registers 
DEA, PMU SNaPSHOUTEOISIOR SUMINAIY: Sissthsstiacactecatatonstestoeesiveieivasecaasdesteius ageaclsobaetee D7-474 
D7.2 | PMPCSSR, Snapshot Program Counter Sample ReQister ........:::cce eeceeeeeeee D7-475 
D7.3.  PMCIDSSR, Snapshot CONTEXTIDR_EL1 Sample Register .........00:. eceeeee D7-476 
D7.4. PMCID2SSR, Snapshot CONTEXTIDR_EL2 Sample Register .......00:. ccc D7-477 
D7 PMSSSR; PMU Snapshot Status: REGISICR +. cicccciscccccsesticenseies civeedsdenvesinoceteovsbasd D7-478 
D7.6 PMOVSSR, PMU Overflow Status Snapshot ReQIStEP .0......0. cece ceeeeneteeteteeee D7-479 
D7.7 PMCCNTSR, PMU Cycle Counter Snapshot Register ......0..:cccccee eeeenteeeeneees D7-480 
D7.8 PMEVCNTSRn, PMU Cycle Counter Snapshot Registers 0-5 .0.....eccce ceeeeeeeeee D7-481 
D7.9  PMSSCR,.PMU Snapshot Capture: ReGISICR oscizcisas.ccssitessunssesas cdsesndeeesdecnesernendes D7-482 
Chapter D8 AArch64 AMU registers 
DBA -AArchOeAMU KeGISler SUIMIMALY ssiersictteeecsteo Rina aaa D8-484 
D8.2 AMCNTENCLRO_ELO, Activity Monitors Count Enable Clear Register, ELO .... D8-485 
D8.3 = AMCNTENSET_ELO, Activity Monitors Count Enable Set Register, ELO.......... D8-486 
D8.4_=AMCFGR_ELO, Activity Monitors Configuration Register, ELO .........1.ceeeeeeee D8-487 
D8.5 AMUSERENR_ELO, Activity Monitor ELO Enable access, ELO .........cccseeees D8-489 
D8.6 AMEVCNTRn_ELO, Activity Monitor Event Counter Register, ELO ........0. 0.00 D8-491 
D8.7 =AMEVTYPERn_ELO, Activity Monitor Event Type Register, ELO .........0. cece D8-492 
Chapter D9 ETM registers 
DOT. KEIM TSGISICr SUNTIMAIY saczxseczcstiertxateaut exbencecvberietomtessbenbouideineolicsisen-tadeeieeeeeeaes D9-497 
D9.2 © TRCACATRn, Address Comparator Access Type Registers 0-7 0... ccsceeees D9-501 
D9.3. TRCACVRn, Address Comparator Value Registers O-7 w....iecccecctcee eteeteeteeennees D9-503 
D9.4 TRCAUTHSTATUS, Authentication Status R@QiStEP ..........::::ccccce ceceeeseteeeteeeneeee D9-504 
D9:5 TRCAUXCTLR, Auxiliary Control ROQISUCD «..22:cccsc..cisetcbts cine tne tabieetedeebennenvecdews D9-505 
D9.6 TRCBBCTLR, Branch Broadcast Control ReQister ..........::::cccccce cecsessseeeeeeeeneeee D9-507 
D9:7. TRCCCCTER, Cycle Count Control ROGISUCF vi..:iiscts..c0seciei.tse eeesbentienetee eas D9-508 
D9.8 TRCCIDCCTLRO, Context ID Comparator Control Register 0 wu... cee D9-509 
D9.9 TRCCIDCVRO, Context ID Comparator Value Register 0 u....cccccecseeeneeeeeees D9-510 
D9.10 TRCCIDRO, ETM Component Identification Register 0.0... ceeesseeeeneees D9-511 
D9.11 TRCCIDR1, ETM Component Identification Register 1 w...cccccccsceseeeeneeees D9-512 
D9.12 TRCCIDR2, ETM Component Identification Register 2 0... ccscceenteeceteeees D9-513 
D9.13 TRCCIDR3, ETM Component Identification Register 3 ....cccesceseesteeceteeees D9-514 
D914 TRCCLAIMCLR, Claim Tag Clear ROGISICM siscicivscixsnesdesscesnee ctsensbsvectetesereeeaienss D9-515 
D915. TROGCLAIMSET, Claim: Tag: S@t ROGISICM eiccsssescccseszceccssacee seed cezesanvence tect eceveeneb ees D9-516 
D916 TROCNTCTERG: Counter Control REGISICF O\sisesscccesdssseccasdsads astscdsedesedzeisieaseetes D9-517 
D9.17 TRCCNTCTLR1, Counter Control Register 1 .........2:cc1ccccccsecses ceeceessenseeseeseesneaee D9-519 
D9.18 TRCCNTRLDVRn, Counter Reload Value Registers O-1 ........::ccccc0 ceeeeesteeeeees D9-521 
D9.19 TRCCNTVRn, Counter Value Registers 0-1 .......:::ccccccccsnccecee ceneeneecsesnteneeseeenaee D9-522 
D9:20 TRCCONEFIGR,, Trace: Configuration ROGISICD iicsc..c-sesotnnessecseteestenenveecseioncesccee D9-523 
D9:21 TRCDEVAFFO, Device Affinity ROGISICF 0) .icccccsosccsecveonsecersvienderevaessoteccensceseeesoosve D9-526 
D9:22 TRCODEVAFF1, Device Affinity ROQISICD 1 siccccisosesscceoseeecsvsoncerevaeseseencteeedertesocsis D9-528 
D9.23. TRCDEVARCH, Device Architecture R@QIStCP ..........22..::cccccceeeseneecensseneenteceensenee D9-529 
D924 TRODEVID: DEWICeiID: ROOISIOM sissiessentccanesicte vcecesinde ae pecancuciaeoyesvendbaenenesedoanescmnain D9-530 
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D9:25 TRODEVIYPE, Device Type REGISICS tins. cecasesceceessrescasabssoe otend eobieevendeansssetesodees D9-531 





D9.26 TRCEVENTCTLOR, Event Control 0 ReGiSter .........2..::cccccccsseceseesneeteceeentnneeteees D9-532 
D9.27 TRCEVENTCTLIR, Event Control 1 Register .........2..1::cccccscssesessesneeeeeseensaneneeees D9-534 
D9.28 TRCEXTINSELR, Extemal Input Select ReGISt6F 3..2:cc.:02. ccsetescee oad iviesseeeeteotebese D9-535 
DO:29) . TROIDRO: [DIREGISIGM 0 scsscostsases stab ies casaraenicasbeesattadon ideaaadeaasauasea tiene tenes sheans ees D9-536 
9.30 TRCIDRT, AD REGISIEF 1 sscsrsdutessscgecteaesieaista seven cadena aniaua acti ee eaoas eae aeateteed D9-538 
DO3t, TROIDRZ. ID REGISICR 2 stisosatscssssteecsapnseacaeaia teas tea a eead earn aes ater ees D9-539 
DO:32: - TRCOIDR3S: ID REGISICR 8: sictesduceovssagesseansingdsaseancesscegan te adesutonqeaesaaeeo untas ence maceeeated D9-541 
D933 “TROIDR, IDGREGISICR 4 tics scx seisecacaesecceQsaasinilivinceoreiaerabcedibearsheatetiasenlecieeie ce D9-543 
DOSS “TRCIDRS: ID REGISICE O cai pics iescassctespecetitag cance os isachip nineteen nine tenieecsipseeieieaenereeie D9-545 
D939 “TRCIDRG; IDUREGISICR Gate sas.escersccetecetaagcantetchipacanie ide cetcesteneraneeoti nite ree eneae seed D9-547 
D936" “TRCIDRS: ID REGISIOR O siissscscoscaxsenespecesitagcenea hei tscchiees ine tenceSubmerna Suatpeoninceieheree D9-548 
DISC TROWURIO ND REGISICE WO <2, siicccsiatys Ses teedssie asd et aris on ancelec sau deetiesdtiaees depesssadete tes D9-549 
DO38:  TREIDRAT ADI REGISIOE TT tessvctesadete.0:2 cede: coaches dsesasssassedeeuatadoeseasielesadsdesanhcs Setcaastes D9-550 
DG39! TRCIDRAZ MDIRCOSICR D2 sascesccstatssiensssssbiest Aicteeasn sn aatternszaciestihasas ives deecssutesates D9-551 
DOAO)  cTROIDRUS) MD IRCGISICE TO sp esscxscac iaszandestesasesSemeaat en Grssexasadie since de iisaaasleetecadesctes D9-552 
D9.41_ TRCIMSPECO, IMPLEMENTATION SPECIFIC Register 0 .......:ccccecceceestteeeneeee D9-553 
D9.42 TRCITATBIDR, Integration ATB Identification REQIStEP ..0......cecee ceeeeeenteeeeneees D9-554 
D9.43. TRCITCTRL, Integration Mode Control REGiSt€P 0.0... escceeseeeceeseteeetnneeeeeneeees D9-555 
D9.44  TRCITIATBINR, Integration Instruction ATB In ReQister ......0::ccccee ceeeeeeeeeeeee D9-556 
D9.45 TRCITIATBOUTR, Integration Instruction ATB Out Register ........:ccecceeeeeeeeees D9-557 
D9.46 TRCITIDATAR, Integration Instruction ATB Data Register ..0......:ccce cients D9-558 
D9.47 TRCLAR, Software Lock ACC@SS ROGIStCP .0.......2:ccscccccceceeenseececeeecnteaeeeeensesseaneess D9-559 
D9.48 TRCLSR, Software Lock StatuS ReQiStCP .........2..:::ccccccseesee cececeeetenneseeseenneneess D9-560 
D9.49 TRCCNTVRn, Counter Value RegiSters O-1 ........:::cccccscscccecee cesneneesesenseneeseessenee D9-561 
D9:50'.. TFROOSEAR, (OS Lock ACCESS REQISION cspscscssseczixcsaceibsscestsspicéieve, tetas see ecese D9-562 
DOS) ~TRCOSESK, ‘OS Lock Status REGISION ss.1:4 ::22;3;de0sis sake saideute. abaatantoraaiaaasecedaiaasaaand D9-563 
D9.52 TRCPDCR, Power Down Control R@QIStCD ..........::ccccsccccccsees ceseeteessessneneeseesseaee D9-564 
D953: TRCPDSR; Power Down Status REGISICL . 225 destete2steaeste nce acicitae asm iadearetets D9-565 
D9.54 TRCPIDRO, ETM Peripheral Identification Register 0 o.....cecccccsee ceeteeeeteeeennees D9-566 
D9.55 TRCPIDR1, ETM Peripheral Identification Register 7 ......2:--.::.:::n00sssscsecosseeeeeees D9-567 
D9.56 TRCPIDR2, ETM Peripheral Identification Register 2 00. ccecccccceeceeteeneeeeennees D9-568 
D9.57 TRCPIDR3, ETM Peripheral Identification Register 3 ....0.ecccccesee ceeteeeneteeeennees D9-569 
D9.58 TRCPIDR4, ETM Peripheral Identification Register 4 0... cecccceceeceeeteeenteeeenaees D9-570 
D9.59 TRCPIDRn, ETM Peripheral Identification Registers 5-7 .....0.ccccee cence D9-571 
D9.60 TRCPRGCTLR, Programming Control R@QISt€P .........ccceeeeeee centecenteeeenneeenenee D9-572 
D9.61 TRCRSCTLRn, Resource Selection Control Registers 2-16 ......cccccsseeeees D9-573 
D9.62 TRCSEQEVRn, Sequencer State Transition Control Registers 0-2... cee D9-574 
D9.63  TRCSEQRSTEVR, Sequencer Reset Control ReGister .......2::::1cccsssrcecseonesseeenee D9-576 
D964 TROSEQSTR; Sequencer State: REGIStCM sisi.sissescidcestasteassensoweedscarvecsineesbadeareotiess D9-577 
D9.65 TRCSSCCRO, Single-Shot Comparator Control Register 0 0... ccceee ceeeceeeeeee D9-578 
D9.66 TRCSSCSRO, Single-Shot Comparator Status Register 0 o......eccccee ceeeeeeeees D9-579 
D367 TROSTALLCTER. Stall Control REGISlCR scacccsesnetasceesseecneenodnenecseresixbestetessxneeseees D9-580 
DO68: TROSTATR, Status REGISICM x. gccnciseaticesscevactescrneestiecingataeiatetiep biceeeagaactatavierse D9-581 
D9.69 TRCSYNCPR, Synchronization Period ReQISIOF .2......::.:22ceccen0sssenescestecsesstnecsees D9-582 
D970: TRETRAGEIDR:;, Mace 1D REGISICR s tosscsscccsscisse:ssnetes dees Pessns adds ecetsvadesdisrecscascpidea D9-583 
D9.71 TRCTSCTLR, Global Timestamp Control ReQister .......0..:ccccessce ccescceerseceennees D9-584 
D9.72 TRCVICTLR, ViewInst Main Control ReQiSter ......21....cccccscscccee cecesesseneesenenseneeees D9-585 
D9.73 TRCVIIECTLR, ViewInst Include-Exclude Control Register ..........22221 cessceceeeees D9-587 
D9.74. TRCVISSCTLR, ViewInst Start-Stop Control Register .....0.cccccee: ceeeesseeeeeees D9-588 

100798_0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights 13 

reserved. 


Non-Confidential 


D9.75 TRCVMIDCVRO, VMID Comparator Value ReQister 0 u......cccccescceeneeeeneeeeennes D9-589 
D9.76 TRCVMIDCCTLRO, Virtual context identifier Comparator Control Register 0 .. D9-590 





PartE Appendices 

Appendix A Cortex®-A76 Core AArch32 UNPREDICTABLE behaviors 
A.1 SCOR UO OV UISUUCHON eztecceth xscssav's cot sacssssctteiexelibeteteeniarctebesebestancaeibenties Appx-A-594 
A.2 Load/Store accesses Crossing PAGE DOUNAALICS ........eeeceeee ceceeteeetnteetenee Appx-A-595 
A.3 Armv&8 Debug UNPREDICTABLE D@NA@VIOIS \.i.iccccceccccesceeees seve esttenoteeeeteenesd Appx-A-596 
A.4 Other UNPREDICTABLE De@NAVIOIS sicsicciosecas.ccsecasascectecawiessies euleiesnseesectoetis Appx-A-599 

Appendix B Revisions 
B.1 PROVISION Sccoscis sencotatscctacsieteseas ess inneseee echt tape ma tsetse ee iebh as eet ieic tee ese ak Appx-B-602 

100798 _0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights 14 
reserved. 


Non-Confidential 


Preface 


This preface introduces the Arm® Cortex*-A76 Core Technical Reference Manual. 


It contains the following: 


¢ About this book on page 16. 
¢ Feedback on page 21. 
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Preface 
Product revision status 


About this book 


This Technical Reference Manual is for the Cortex*-A76 core. It provides reference documentation and 
contains programming details for registers. It also describes the memory system, the caches, the 
interrupts, and the debug features. 


Product revision status 


The rmpn identifier indicates the revision status of the product described in this book, for example, rip2, 
where: 

rm Identifies the major revision of the product, for example, rl. 

pn Identifies the minor revision or modification status of the product, for example, p2. 


Intended audience 


This manual is for system designers, system integrators, and programmers who are designing or 
programming a System-on-Chip (SoC) that uses an Arm core. 


Using this book 
This book is organized into the following chapters: 


Part A Functional description 
This part describes the main functionality of the Cortex-A76 core. 


Chapter A1 Introduction 
This chapter provides an overview of the Cortex-A76 core and its features. 


Chapter A2 Technical overview 
This chapter describes the structure of the Cortex-A76 core. 


Chapter A3 Clocks, resets, and input synchronization 
This chapter describes the clocks, resets, and input synchronization of the Cortex-A76 core. 


Chapter A4 Power management 
This chapter describes the power domains and the power modes in the Cortex-A76 core. 


Chapter A5 Memory Management Unit 
This chapter describes the Memory Management Unit (MMU) of the Cortex-A76 core. 


Chapter A6 Level 1 memory system 
This chapter describes the L1 instruction cache and data cache that make up the L1 memory 
system. 


Chapter A7 Level 2 memory system 
This chapter describes the L2 memory system. 


Chapter A8 Reliability, Availability, and Serviceability (RAS) 
This chapter describes the RAS features implemented in the Cortex-A76 core. 


Chapter A9 Generic Interrupt Controller CPU interface 
This chapter describes the Cortex-A76 core implementation of the Arm Generic Interrupt 
Controller (GIC) CPU interface. 


Chapter A10 Advanced SIMD and floating-point support 
This chapter describes the Advanced SIMD and floating-point features and registers in the 
Cortex-A76 core. The unit in charge of handling the Advanced SIMD and floating-point features 
is also referred to as data engine in this manual. 


Part B Register descriptions 
This part describes the non-debug registers of the Cortex-A76 core. 
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Chapter B1 AArch32 system registers 
This chapter describes the system registers in the AArch32 state. 


Chapter B2 AArch64 system registers 
This chapter describes the system registers in the AArch64 state. 


Chapter B3 Error system registers 
This chapter describes the error registers accessed by the AArch64 error registers. 


Chapter B4 GIC registers 
This chapter describes the GIC registers. 


Chapter B5 Advanced SIMD and floating-point registers 
This chapter describes the Advanced SIMD and floating-point registers. 


Part C Debug descriptions 
This part describes the debug functionality of the Cortex-A76 core. 


Chapter C1 Debug 
This chapter describes the Cortex-A76 core debug registers and shows examples of how to use 
them. 


Chapter C2 Performance Monitor Unit 
This chapter describes the Performance Monitor Unit (PMU) and the registers that it uses. 


Chapter C3 Activity Monitor Unit 
This chapter describes the Activity Monitor Unit (AMU). 


Chapter C4 Embedded Trace Macrocell 
This chapter describes the ETM for the Cortex-A76 core. 


Part D Debug registers 
This part describes the debug registers of the Cortex-A76 core. 


Chapter D1 AArch32 debug registers 
This chapter describes the debug registers in the AArch32 Execution state and shows examples of 
how to use them. 


Chapter D2 AArch64 debug registers 
This chapter describes the debug registers in the AArch64 Execution state and shows examples of 
how to use them. 


Chapter D3 Memory-mapped debug registers 
This chapter describes the memory-mapped debug registers and shows examples of how to use 
them. 


Chapter D4 AArch32 PMU registers 
This chapter describes the AArch32 PMU registers and shows examples of how to use them. 


Chapter D5 AArch64 PMU registers 
This chapter describes the AArch64 PMU registers and shows examples of how to use them. 


Chapter D6 Memory-mapped PMU registers 
This chapter describes the memory-mapped PMU registers and shows examples of how to use 
them. 


Chapter D7 PMU snapshot registers 
PMU snapshot registers are an IMPLEMENTATION DEFINED extension to an Armv8-A compliant PMU 
to support an external core monitor that connects to a system profiler. 


Chapter D8 AArch64 AMU registers 
This chapter describes the AArch64 AMU registers and shows examples of how to use them. 


Chapter D9 ETM registers 
This chapter describes the ETM registers. 
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Part E Appendices 
This part describes the appendices of the Cortex-A76 core. 


Appendix A Cortex®-A76 Core AArch32 UNPREDICTABLE behaviors 
This appendix describes the cases in which the Cortex-A76 core implementation diverges from 
the preferred behavior described in Armv8 AArch32 UNPREDICTABLE behaviors. 


Appendix B Revisions 
This appendix describes the technical changes between released issues of this book. 


Glossary 


The Arm® Glossary is a list of terms used in Arm documentation, together with definitions for those 
terms. The Arm Glossary does not contain terms that are industry standard unless the Arm meaning 
differs from the generally accepted meaning. 


See the Arm® Glossary for more information. 


Typographic conventions 


italic 
Introduces special terminology, denotes cross-references, and citations. 

bold 
Highlights interface elements, such as menu names. Denotes signal names. Also used for terms 
in descriptive lists, where appropriate. 

monospace 
Denotes text that you can enter at the keyboard, such as commands, file and program names, 
and source code. 

monospace 


Denotes a permitted abbreviation for a command or option. You can enter the underlined text 
instead of the full command or option name. 


monospace italic 
Denotes arguments to monospace text where the argument is to be replaced by a specific value. 


monospace bold 
Denotes language keywords when used outside example code. 


<and> 
Encloses replaceable terms for assembler syntax where they appear in code or code fragments. 
For example: 
MRC p15, @, <Rd>, <CRn>, <CRm>, <Opcode_2> 
SMALL CAPITALS 


Used in body text for a few terms that have specific technical meanings, that are defined in the 
Arm® Glossary. For example, IMPLEMENTATION DEFINED, IMPLEMENTATION SPECIFIC, UNKNOWN, and 
UNPREDICTABLE. 


Timing diagrams 


The following figure explains the components used in timing diagrams. Variations, when they occur, 
have clear labels. You must not assume any timing information that is not explicit in the diagrams. 


Shaded bus and signal areas are undefined, so the bus or signal can assume any value within the shaded 
area at that time. The actual level is unimportant and does not affect normal operation. 
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Boi = 
HIGH to LOW \ \ 
Transient V 
HIGH/LOW to HIGH l ] 


Bus stable 


Bus to high impedance }/——- 
Bus change { 
High impedance to stable bus + } 


Figure 1 Key to timing diagram conventions 


Signals 
The signal conventions are: 


Signal level 
The level of an asserted signal depends on whether the signal is active-HIGH or active-LOW. 
Asserted means: 
¢ HIGH for active-HIGH signals. 
¢ LOW for active-LOW signals. 


Lowercase n 


At the start or end of a signal name denotes an active-LOW signal. 


Additional reading 


This book contains information that is specific to this product. See the following documents for other 
relevant information. 


Arm publications 

¢« Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile (DDI 0487). 

« Arm® Cortex®-A76 Core Cryptographic Extension Technical Reference Manual (100801). 

« Arm® Cortex*-A76 Core Configuration and Sign-off Guide (100799). 

¢« Arm® Cortex*-A76 Core Integration Manual (100800). 

¢« Arm® DynamIQ™ Shared Unit Integration Manual (100455). 

¢ Arm® DynamIQ™ Shared Unit Technical Reference Manual (100453). 

¢ Arm® DynamIQ™ Shared Unit Configuration and Sign-off Guide (100454). 

¢« Arm® CoreSight™ ELA-500 Embedded Logic Analyzer Technical Reference Manual 
(100127). 

¢ AMBA® AXI and ACE Protocol Specification AXI3, AXI4, AXI5, ACE and ACES (THI 0022). 

¢ AMBA® APB Protocol Version 2.0 Specification (THI 0024). 

¢ Arm® AMBA® 5 CHI Architecture Specification (THI 0050). 

¢« Arm® CoreSight™ Architecture Specification v3.0 (THI 0029). 

¢« Arm® Debug Interface Architecture Specification, ADIv5.0 to ADIv5.2 (THI 0031). 

« AMBA® 4 ATB Protocol Specification (THI 0032). 

¢ Arm® Generic Interrupt Controller Architecture Specification (THI 0069). 

¢« Arm® Embedded Trace Macrocell Architecture Specification ETMv4 (1HI 0064). 

« AMBA® Low Power Interface Specification Arm® QO-Channel and P-Channel Interfaces (THI 
0068). 

¢ Arm® Reliability, Availability, and Serviceability (RAS) Specification, Armv8&, for the Armv8- 
A architecture profile (DDI 0587A). 
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Other publications 
¢ ANSIAIEEE Std 754-2008, IEEE Standard for Binary Floating-Point Arithmetic. 
Note 


Arm floating-point terminology is largely based on the earlier ANSI/IEEE Std 754-1985 
issue of the standard. See the Arm® Architecture Reference Manual Armv8, for Armv8-A 
architecture profile for more information. 
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Feedback 


Feedback on this product 


If you have any comments or suggestions about this product, contact your supplier and give: 

¢ The product name. 

¢ The product revision or version. 

¢ An explanation with as much information as you can provide. Include symptoms and diagnostic 
procedures if appropriate. 


Feedback on content 


If you have comments on content then send an e-mail to errata@arm.com. Give: 


¢ The title Arm Cortex-A76 Core Technical Reference Manual. 

« The number 100798 0301 00 en. 

¢ Ifapplicable, the page number(s) to which your comments refer. 
¢ A concise explanation of your comments. 


Arm also welcomes general suggestions for additions and improvements. 
Note 


Arm tests the PDF only in Adobe Acrobat and Acrobat Reader, and cannot guarantee the quality of the 
represented document when used with any other PDF reader. 
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Part A 


Functional description 


Chapter A1 
Introduction 


This chapter provides an overview of the Cortex-A76 core and its features. 


It contains the following sections: 

¢ Al.1 About the core on page A1-26. 

¢ A1.2 Features on page A1-27. 

¢ AJ.3 Implementation options on page A1-28. 

¢ A1.4 Supported standards and specifications on page A1-29. 
¢ AI.5 Test features on page A1-30. 

¢ A1.6 Design tasks on page Al-31. 

¢ A1.7 Product revisions on page A1-32. 
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A1 Introduction 
A1.1 About the core 


The Cortex-A76 core is a high-performance and low-power Arm product that implements the Armv8-A 


architecture. 


The Cortex-A76 core supports: 


¢ The Armv8.2-A extension. 
¢ The RAS extension. 


¢ The Load acquire (LDAPR) instructions introduced in the Armv8.3-A extension 
¢ The Dot Product support instructions introduced in the Armv8.4-A extension. 
¢ The PSTATE Speculative Store Bypass Safe (SSBS) bit and the speculation barriers (CSDB, SSBB, 


PSSBB) instructions introduced in the Armv8.5-A extension. 


The Cortex-A76 core has a Level / (L1) memory system and a private, integrated Level 2 (L2) cache. It 


also includes a superscalar, variable-length, out-of-order pipeline. 


The Cortex-A76 core is implemented inside the DynamIQ Shared Unit (DSU) cluster. For more 
information, see the Arm® DynamIQ™ Shared Unit Technical Reference Manual. 


The following figure shows an example of a configuration with four Cortex-A76 cores. 





















































DynamlQ™ Cluster 
External memory interface—»> 
Core 0 
Interrupt interface—p> 
Core 1 
Power management and 
DSU —> 
clock control 
Core 2 
DF ————— > 
Core 3 
CoreSight infrastructure» 
Figure A1-1 Example Cortex-A76 configuration 
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A1.2 Features 


A1.2 Features 


The Cortex-A76 core includes the following features: 
Core features 


¢ Full implementation of the Armv8.2-A A64, A32, and T32 instruction sets. 

« Armvés.4 Dot Product instruction support. 

¢ AArch32 execution state at Exception level ELO only. AArch64 execution state at all Exception 
levels (ELO to EL3). 

¢ Support for Arm TrustZone® technology. 

¢ A Memory Management Unit (MMU). 

¢ Superscalar, variable-length, out-of-order pipeline. 

¢ 40-bit Physical Address (PA). 


¢ An integrated execution unit that implements the Advanced SIMD and floating-point architecture 
support. 

¢ Optional Cryptographic Extension. 

* Generic Interrupt Controller (GICv4) CPU interface to connect to an external distributor. 

¢ Generic Timers interface supporting 64-bit count input from an external system counter. 

¢ Reliability, Availability, and Serviceability (RAS) Extension. 


Cache features 


¢ Separate L1 data and instruction caches. 

¢ Private, unified data and instruction L2 cache. 

¢ Optional L1 and L2 memory protection in the form of Error Correcting Code (ECC) or parity on all 
RAM instances. 


Debug features 

« Armv8.2 debug logic. 

¢ Performance Monitoring Unit (PMU). 

¢ Embedded Trace Macrocell (ETM) that supports instruction trace only. 
¢ Activity Monitor Unit (AMU). 

¢ Optional Coresight Embedded Logic Analyzer (ELA). 


See the Arm® Architecture Reference Manual Armv&, for Armv8-A architecture profile for more 
information. 
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A1.3 Implementation options 


A1.3 Implementation options 


All Cortex-A76 cores in the cluster must have the same build-time configuration options, except for the 
L2 cache size. 


The following table lists the implementation options for a core. 


Table A1-1 Core implementation options 




















Feature Range of options Notes 

L2 cache size * 128KB - 
* 256KB 
* 512KB 

L2 transaction queue size ¢ 24 entries There are two identical L2 banks in the 
* 36 entries Cortex-A76 core that can be configured 
* 48 entries with 12, 18, or 24 L2 transaction queue 

entries per L2 bank. 

L1 and L2 ECC or parity protection Can be included or not included. L1 and L2 error protection can only be 
enabled if L3 cache error protection is 
enabled. 

Cryptographic Extension Can be included or not included. - 

Core bus width 128-bit, 256-bit This specifies the bus width between the 


core and the DSU CPU bridge. The legal 

core bus width and master bus width 

combinations are: 

¢ Ifthe core bus width is 128 bits, the 
master bus interface can be any of the 
following options. 
— Single 128-bit wide ACE interface. 
— Dual 128-bit wide ACE interfaces. 
— Single 128-bit wide CHI interface. 
— Single 256-bit wide CHI interface. 

¢ Ifthe core bus width is 256 bits, the 
master bus interface is a single 256-bit 
wide CHI interface. 





CoreSight Embedded Logic Analyzer (ELA) | Optional support Support for integrating CoreSight 
ELA-500. CoreSight is a separately 
licensable product. 




















ELA RAM Address size See the Arm® CoreSight™ ELA-500 The default and recommended value for 
Embedded Logic Analyzer Technical Cortex-A76 is 6. 
Reference Manual for the full supported 
range. 
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Supported standards and specifications 


A1 Introduction 
A1.4 Supported standards and specifications 


The Cortex-A76 core implements the Armv8-A architecture and some architecture extensions. It also 
supports interconnect, interrupt, timer, debug, and trace architectures. 


Table A1-2 Compliance with standards and specifications 








Architecture Version Notes 

specification or 

standard 

Arm architecture Armv8-A * AArch32 execution state at Exception level ELO only. AArch64 


execution state at all Exception levels (ELO-EL3). 
« A64, A32, and T32 instruction sets. 





Arm architecture 
extensions 


« Armv8.1-A extensions 

« Armv8.2-A extensions 

* Cryptographic extension 

* RAS extension 

« Armv8.3-A extensions 

« Armv8.4-A dot product 
instructions 

« Armv8.5-A extensions 


¢ The Cortex-A76 core implements the LDAPR instructions 
introduced in the Armv8.3-A extensions. 

¢ The Cortex-A76 core implements the SDOT and UDOT 
instructions introduced in the Armv8.4-A extensions. 

¢ The Cortex-A76 core implements the PSTATE Speculative Store 
Bypass Safe (SSBS) bit introduced in the Armv8.5-A extension. 


























Generic Interrupt GICv4 - 

Controller 

Generic Timer Armv8-A 64-bit external system counter with timers within each core. 

PMU PMUv3 - 

Debug Armv8-A With support for the debug features added by the Armv8.2-A 
extensions. 

CoreSight CoreSightv3 - 

Embedded Trace ETMv4.2 Instruction trace only. 

Macrocell 











See Additional reading on page 19 for a list of architectural references. 
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A1 Introduction 
A1.5 Test features 


A1.5 Test features 


The Cortex-A76 core provides test signals that enable the use of both Automatic Test Pattern Generation 
(ATPG) and Memory Built-In Self Test (MBIST) to test the core logic and memory arrays. 
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A1.6 Design tasks 


Design tasks 


The Cortex-A76 core is delivered as a synthesizable Register Transfer Level (RTL) description in Verilog 
HDL. Before you can use the Cortex-A76 core, you must implement it, integrate it, and program it. 


A different party can perform each of the following tasks. Each task can include implementation and 
integration choices that affect the behavior and features of the core. 


Implementation 
The implementer configures and synthesizes the RTL to produce a hard macrocell. This task 
includes integrating RAMs into the design. 


Integration 
The integrator connects the macrocell into a SoC. This task includes connecting it to a memory 
system and peripherals. 


Programming 
In the final task, the system programmer develops the software to configure and initialize the 
core and tests the application software. 


The operation of the final device depends on the following: 


Build configuration 
The implementer chooses the options that affect how the RTL source files are pre-processed. 
These options usually include or exclude logic that affects one or more of the area, maximum 
frequency, and features of the resulting macrocell. 


Configuration inputs 
The integrator configures some features of the core by tying inputs to specific values. These 
configuration settings affect the start-up behavior before any software configuration is made. 
They can also limit the options available to the software. 


Software configuration 
The programmer configures the core by programming particular values into registers. The 
configuration choices affect the behavior of the core. 
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A1.7 Product revisions 


A1.7 Product revisions 


This section indicates the first release and, in subsequent releases, describes the differences in 
functionality between product revisions. 





r0p0 
First release. 

r1p0 
Further development and optimization of the product, including updates to the L2 data RAM 
control inputs to allow multi-cycle hold timing constraints to ease timing closure. 

r2p0 
Includes Inter-Exception level isolation of branch predictor structures so that an Exception 
Level cannot train branch prediction for a different Exception Level to reliability hit in these 
trained prediction entries. Implemented new barrier SSBB. 

r3p0 
Implemented new barriers PSSBB and CSDB. Support for Speculative Store Bypass Safe 
(SSBS) bit enabling software to indicate whether hardware is permitted to load or store 
speculatively. 

r3p1 
No functional changes to core for this revision. 
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Technical overview 


This chapter describes the structure of the Cortex-A76 core. 


It contains the following sections: 

¢ A2.1 Components on page A2-34. 

¢ A2.2 Interfaces on page A2-38. 

¢ A2.3 About system control on page A2-39. 

¢ A2.4 About the Generic Timer on page A2-40. 
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A2.1 Components 


A2.1 Components 


In a standalone configuration, the core consists of up to four cores and a DSU that connects the cores to 
an external memory system. 


For more information about the DSU, see the Arm® DynamIQ™ Shared Unit Technical Reference Manual. 
The main components of the Cortex-A76 core are: 


¢ Instruction fetch. 

¢ Instruction decode. 

¢ Register rename. 

¢ Instruction issue. 

¢ Execution pipelines. 

« LI data memory system. 
¢ L2 memory system. 
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The following figure is an overview of the Cortex-A76 core. 


A2 Technical overview 
A2.1 Components 
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Figure A2-1 Cortex-A76 core overview 
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A2.1 Components 





Note 


There are multiple asynchronous bridges between the Cortex-A76 core and the DSU. Only the CPU 
bridge between the Cortex-A76 core and the DSU can be configured to run synchronously, however it 
does not affect the other interfaces such as debug, trace, and GIC which are always asynchronous. For 
more information on how to set the CPU bridge to run either synchronously or asynchronously, see 
Configuration Guidelines in the Arm® DynamIQ™ Shared Unit Configuration and Sign-off Guide. 








A2.1.1 Instruction fetch 
The instruction fetch unit fetches instructions from the L1 instruction cache and delivers the instruction 
stream to the instruction decode unit. 
The instruction fetch unit includes: 
« A 64KB, 4-way, set associative L1 instruction cache with 64-byte cache lines and optional parity 
protection. 
« A fully associative L1 instruction TLB with native support for 4KB, 16KB, 64KB, 2MB, and 32MB 
page sizes. 
« A dynamic branch predictor. 
A2.1.2 Instruction decode 
The instruction decode unit supports the A32, T32, and A64 instruction sets. It also supports Advanced 
SIMD and floating-point instructions in each instruction set. 
A2.1.3 Register rename 
The register rename unit performs register renaming to facilitate out-of-order execution and dispatches 
decoded instructions to various issue queues. 
A2.1.4 Instruction issue 
The instruction issue unit controls when the decoded instructions are dispatched to the execution 
pipelines. It includes issue queues for storing instruction pending dispatch to execution pipelines. 
A2.1.5 Execution pipeline 
The execution pipeline includes: 
¢ Integer execute unit that performs arithmetic and logical data processing operations. 
¢ Vector execute unit that performs Advanced SIMD and floating point operations. Optionally, it can 
execute the cryptographic instructions. 
A2.1.6 L1 data memory system 
The L1 data memory system executes load and store instructions and encompasses the L1 data side 
memory system. It also services memory coherency requests. 
The load/store unit includes: 
¢ A 64KB, 4-way, set associative L1 data cache with 64-byte cache lines and optional ECC protection 
per 32 bits. 
¢ A fully associative L1 data TLB with native support for 4KB, 16KB, 64KB, 2MB, and 512MB page 
sizes. 
A2.1.7 L2 memory system 
The L2 memory system services L1 instruction and data cache misses from the Cortex-A76 core. 
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A2 Technical overview 
A2.1 Components 
The L2 memory system includes: 
« An 8-way set associative L2 cache with data ECC protection per 64 bits. The L2 cache is 
configurable with sizes of 128KB, 256KB, or 512KB. 
¢ An interface with the DSU configurable at implementation time for synchronous or asynchronous 
operation. 
Related references 
Chapter A5 Memory Management Unit on page A5-61 
Chapter A6 Level 1 memory system on page A6-71 
Chapter A7 Level 2 memory system on page A7-97 
Chapter A9 Generic Interrupt Controller CPU interface on page A9-111 
Chapter CI Debug on page C1-367 
Chapter C2 Performance Monitor Unit on page C2-373 
Chapter C4 Embedded Trace Macrocell on page C4-393 
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A2 Technical overview 
A2.2 Interfaces 


A2.2 Interfaces 


The Cortex-A76 core has several interfaces to connect it to a SoC. The DSU manages all interfaces. 


For information on the interfaces, see the Arm® DynamIOQ™ Shared Unit Technical Reference Manual. 
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A2 Technical overview 
A2.3 About system control 


A2.3 About system control 


The system registers control and provide status information for the functions that the core implements. 


The main functions of the system registers are: 


Overall system control and configuration. 
MMU configuration and management. 
Cache configuration and management. 
System performance monitoring. 

GIC configuration and management. 


The system registers are accessible in the AArch64 ELO-EL3 and AArch32 ELO Execution state. Some 
of the system registers are accessible through the external debug interface. 
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A2 Technical overview 
A2.4 About the Generic Timer 


A2.4 About the Generic Timer 


The Generic Timer can schedule events and trigger interrupts that are based on an incrementing counter 
value. It generates timer events as active-LOW interrupt outputs and event streams. 


The Cortex-A76 core provides a set of timer registers. The timers are: 
« An ELI! Non-secure physical timer. 

¢ An EL2 Hypervisor physical timer. 

¢ An EL3 Secure physical timer. 

¢ A virtual timer. 

¢ A Hypervisor virtual timer. 


The Cortex-A76 core does not include the system counter. This resides in the SoC. The system counter 
value is distributed to the core with a 64-bit bus. 


For more information on the Generic Timer, see the Arm® DynamIQ™ Shared Unit Technical Reference 
Manual and the Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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Chapter A3 
Clocks, resets, and input synchronization 


This chapter describes the clocks, resets, and input synchronization of the Cortex-A76 core. 


It contains the following sections: 


¢ A3.1 About clocks, resets, and input synchronization on page A3-42. 
¢ A3.2 Asynchronous interface on page A3-43. 
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A3 Clocks, resets, and input synchronization 
A3.1 About clocks, resets, and input synchronization 


A3.1 About clocks, resets, and input synchronization 
The Cortex-A76 core supports hierarchical clock gating. 


The Cortex-A76 core contains several interfaces that connect to other components in the system. These 
interfaces can be in the same clock domain or in other clock domains. 


For information about clocks, resets, and input synchronization, see the Arm® DynamIQ™ Shared Unit 
Technical Reference Manual. 
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A3 Clocks, resets, and input synchronization 
A3.2 Asynchronous interface 


A3.2 Asynchronous interface 


Your implementation can include an optional asynchronous interface between the core and the DSU top 
level. 


See the Arm® DynamIOQ™ Shared Unit Technical Reference Manual for more information. 





100798 _0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights A3-43 
reserved. 
Non-Confidential 


A3 Clocks, resets, and input synchronization 
A3.2 Asynchronous interface 
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Chapter A4 
Power management 


This chapter describes the power domains and the power modes in the Cortex-A76 core. 


It contains the following sections: 

¢ A4.1 About power management on page A4-46. 

¢ A4.2 Voltage domains on page A4-47. 

¢ A4.3 Power domains on page A4-48. 

¢ A4.4 Architectural clock gating modes on page A4-50. 
¢ A4.5 Power control on page A4-52. 

¢ A4.6 Core power modes on page A4-53. 

¢ A4.7 Encoding for power modes on page A4-56. 

¢ A4.8 Power domain states for power modes on page A4-57. 
¢ A4.9 Power up and down sequences on page A4-58. 

« A4.10 Debug over powerdown on page A4-59. 
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A4 Power management 
A4.1 About power management 


A4.1 About power management 
The Cortex-A76 core provides mechanisms to control both dynamic and static power dissipation. 
Dynamic power management includes the following features: 


¢ Architectural clock gating. 
¢ Per-core Dynamic Voltage and Frequency Scaling (DVFS). 


Static power management includes the following features: 


¢ Dynamic retention. 
* Powerdown. 


Related references 

A4.3 Power domains on page A4-48 

A4.8 Power domain states for power modes on page A4-57 
A4.5 Power control on page A4-52 

A4.9 Power up and down sequences on page A4-58 
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A4 Power management 
A4.2 Voltage domains 


A4.2 Voltage domains 


The Cortex-A76 core supports a VCPU voltage domain and a VSYS voltage domain. 


The following figure shows the VCPU and VSYS voltage domains in each Cortex-A76 core and in the 
DSU. The example shows a configuration with four Cortex-A76 cores. 





i} VCPUO L} VCPU2 
L} VCPU1 ~} VCPU3 
B® vsys 


Figure A4-1 Cortex-A76 voltage domains 


Asynchronous bridge logic exists between the voltage domains. The Cortex-A76 core logic and core 
clock domain of the asynchronous bridge are in the VCPU voltage domain. The DSU clock domain of 
the asynchronous bridge is in the VSYS voltage domain. 

Note 


You can tie VCPU and VSYS to the same supply if one of the following conditions is met: 


¢ The core is configured to run synchronously with the DSU sharing the same clock. 
¢ The core is not required to support DVFS. 
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A4 Power management 
A4.3 Power domains 


Power domains 


The Cortex-A76 core contains a core power domain (PDCPU), and a core top-level SYS power domain 
(PDSYS) where all the Cortex-A76 core I/O signals go through. 


The PDCPU power domain contains all enyo_cpu logic and part of the core asynchronous bridge that 
belongs to the VCPU domain. The Advanced SIMD and floating-point unit are included in the PDCPU 
power domain and is not supported as a separate power domain. The L1 and L2 RAMs are included in 
the PDCPU power domain and are not part of a separate power domain. 


The PDSYS power domain contains the part of the core asynchronous bridge that belongs to the DSU 
power domain. 
Note 


There are additional system power domains in the DSU. See the Arm® DynamIQ™ Shared Unit Technical 
Reference Manual for information. 








The following table shows the power domain that the Cortex-A76 core supports. 


Table A4-1 Power domain description 





Power 
domain 


Hierarchy Description 





PDCPU<n> 


U_vcpu The domain includes the Advanced SIMD and floating-point block, the L1 and L2 TLBs, L1 and 
L2 cache RAMs, and Debug registers that are associated with the Cortex-A76 core. 


<n> is the number of Cortex-A76 cores. The number represents core 0, core 1, core 2, and core 3. 
If a core is not present, the corresponding power domain is not present. 





PDSYS 








Top-level The domain is the interface between Cortex-A76 and the DSU. It contains the cluster clock domain 
hierarchy and logic of the CPU bridge. The CPU Bridge contains all asynchronous bridges for crossing clock 
everything domains, and is split with one half of each bridge in the core clock domain and the other half in the 
outside U_VCpU | relevant cluster domain. All core I/O signals go through the CPU bridge and the SYS power 
domain. 


The domain is shared between the and hierarchies, and contains: 
« Anything outside of the core power domain (u_vcpu hierarchy). 
* u_cb_sys. 











Clamping cells between power domains are inferred through power intent files rather than instantiated in 
the RTL. 


The following figure shows an example of the organization of the power domains. 
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A4 Power management 
A4.3 Power domains 
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Figure A4-2 Cortex-A76 core power domain diagram at enyo_core level 


The following figure shows the power domains in the DSU, where everything in the same color is part of 
the same power domain. The example shows four Cortex-A76 cores. The number of Cortex-A76 cores 
can vary, and the number of domains increases based on the number of Cortex-A76 cores present. 


This example only shows the power domains that are associated with the Cortex-A76 cores, other power 
domains are required for a DSU. 








PDCPU[0] domain PDCPU[1] domain 


Core 0 Core 1 


























































































































Adv-SIMD/FP (Lil Adv-SIMD/FP 
L2 
PDSYS 
Figure A4-3 Cortex-A76 power domains at enyo_core level 
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A4 Power management 
A4.4 Architectural clock gating modes 


A4.4 Architectural clock gating modes 


When the Cortex-A76 core is in standby mode, it is architecturally clock gated at the top of the clock 
tree. 


Wait for Interrupt (WFI) and Wait for Event (WFE) are features of Armv8-A architecture that put the 
core in a low-power standby mode by architecturally disabling the clock at the top of the clock tree. The 
core is fully powered and retains all the state in standby mode. 


A4.4.1 Core Wait for Interrupt 


WFI puts the core in a low-power state by disabling most of the clocks in the core, while keeping the 
core powered up. 


There is a small dynamic power overhead from the logic that is required to wake up the core from WFI 
low-power state. Other than this, the power that is drawn is reduced to static leakage current only. 


When the core executes the WFI instruction, the core waits for all instructions in the core to retire before 
it enters low-power state. The WFI instruction ensures that all explicit memory accesses that occurred 
before the WFI instruction in program order have retired. 


In addition, the WFI instruction ensures that store instructions have updated the cache or have been issued 
to the L3 memory system. 


While the core is in WFI low-power state, the clocks in the core are temporarily enabled without causing 
the core to exit WFI low-power state when any of the following events are detected: 


¢« AnL3 snoop request that must be serviced by the core data caches. 

¢ Acache or TLB maintenance operation that must be serviced by the core L1 instruction cache, data 
cache, TLB, or L2 cache. 

¢ An APB access to the debug or trace registers residing in the core power domain. 

« AGIC CPU access through the AXI4 stream channel. 


Exit from WFI low-power state occurs when one of the following occurs: 
¢ The core detects one of the WFI wake-up events. 
¢ The core detects a reset. 


For more information, see the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture 
profile. 


A4.4.2 Core Wait for Event 


WFE is a feature of the Armv8-A architecture. It uses a locking mechanism based on events, to put the 
core in a low-power state by disabling most of the clocks in the core, while keeping the core powered up. 


There is a small dynamic power overhead from the logic that is required to wake up the core from WFE 
low-power state. Other than this, the power that is drawn is reduced to static leakage current only. 


A core enters into WFE low-power state by executing the WFE instruction. When the WFE instruction 
executes, the core waits for all instructions in the core to complete before it enters the idle or low-power 
state. 


If the event register is set, execution of WFE does not cause entry into standby state, but clears the event 
register. 


While the core is in WFE low-power state, the clocks in the core are temporarily enabled without causing 
the core to exit WFE low-power state when any of the following events are detected: 


¢ An external snoop request that must be serviced by the core data caches. 

¢ Acache or TLB maintenance operation that must be serviced by the core L1 instruction cache, data 
cache, TLB, or L2 cache. 

¢« An APB access to the debug or trace registers residing in the core power domain. 

« AGIC CPU access through the AXI4 stream channel. 
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A4 Power management 
A4.4 Architectural clock gating modes 


Exit from WFE low-power state occurs when one of the following occurs: 


¢ The core detects one of the WFE wake-up events. 
¢ The EVENTI input signal is asserted. 
¢ The core detects a reset. 


For more information, see the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture 
profile. 
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A4 Power management 
A4.5 Power control 


A4.5 Power control 


All power mode transitions are performed at the request of the power controller, using a P-Channel 
interface to communicate with the Cortex-A76 core. 


There is one P-Channel per core, plus one P-Channel for the cluster. The Cortex-A76 core provides the 
current requirements on the PACTIVE signals, so that the power controller can make decisions and 
request any change with PREQ and PSTATE. The Cortex-A76 core then performs any actions necessary 
to reach the requested power mode, such as gating clocks, flushing caches, or disabling coherency, before 
accepting the request. 


If the request is not valid, either because of an incorrect transition or because the status has changed so 
that state is no longer appropriate, then the request is denied. The power mode of each core can be 
independent of other cores in the cluster, however the cluster power mode is linked to the mode of the 
cores. 
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A4.6.1 


A4.6.2 


A4 Power management 
A4.6 Core power modes 


Core power modes 


On 


Off 


The following figure shows the supported modes for each core domain P-Channel, and the legal 
transitions between them. 


Dynamic 
retention 








Off 
(Emulated) 


From any 
power mode 


Figure A4-4 Cortex-A76 core power domain mode transitions 


The blue modes indicate the modes the channel can be initialized into. 


In this mode, the core is on and fully operational. 


The core can be initialized into the On mode. If the core does not use P-Channel, you can tie the core in 
the On mode by tying PREQ LOW. 


When a transition to the On mode completes, all caches are accessible and coherent. Other than the 
normal architectural steps to enable caches, no additional software configuration is required. 


When the core domain P-Channel is initialized into the On mode, either as a shortcut for entering that 
mode or as a tie-off for an unused P-Channel, it is an assumed transition from the Off mode. This 
includes an invalidation of any cache RAM within the core domain. 


The Cortex-A76 core supports a full shutdown mode where power can be removed completely and no 
state is retained. 


The shutdown can be for either the whole cluster or just for an individual core, which allows other cores 
in the cluster to continue operating. 


In this mode, all core logic and RAMs are off. The domain is inoperable and all core state is lost. The L1 
and L2 caches are disabled, flushed and the core is removed from coherency automatically on transition 
to Off mode. 


A Cold reset can reset the core in this mode. 
The core P-Channel can be initialized into this mode. 


An attempted debug access when the core domain is off returns an error response on the internal debug 
interface indicating the core is not available. 
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A4 Power management 
A4.6 Core power modes 


A4.6.3 Off (emulated) 


In this mode, all core domain logic and RAMs are kept on. However, core warm reset can be asserted 
externally to emulate a power off scenario while keeping core debug state and allowing debug access. 


All debug registers must retain their mode and be accessible from the external debug interface. All other 
functional interfaces behave as if the core were Off. 


A4.6.4 Core dynamic retention 


In this mode, all core logic and RAMs are in retention and the core domain is inoperable. The core can 
be entered into this power mode when it is in WFI or WFE mode. 


The core dynamic retention can be enabled and disabled separately for WFI and WFE by software 

running on the core. Separate timeout values can be programmed for entry into this mode from WFI and 

WFE mode: 

¢ Use the CPUPWRCTLR.WFIL RET CTRL register bits to program timeout values for entry into core 
dynamic retention mode from WFI mode. 

¢ Use the CPUPWRCTLR.WFE RET CTRL register bits to program timeout values for entry into 
core dynamic retention mode from WFE mode. 


When in dynamic retention and the core is synchronous to the cluster, the clock to the core is 
automatically gated outside of the domain. However, if the core is running asynchronous to the cluster, 
the system integrator must gate the clock externally during core dynamic retention. For more 
information, see the Arm® DynamIQ™ Shared Unit Configuration and Sign-off Guide. 


The outputs of the domain must be isolated to prevent buffers without power from propagating UNKNOWN 
values to any operational parts of the system. 


When the core is in dynamic retention there is support for Snoop, GIC, and debug access, so the core 
appears as if it were in WFI or WFE mode. When such an incoming access occurs, it stalls and the On 
PACTIVE bit is set HIGH. The incoming access proceeds when the domain is returned to On using P- 
Channel. 


When the incoming access completes, and if the core has not exited WFI or WFE mode, then the On 
PACTIVE bit is set LOW after the programmed retention timeout. The power controller can then 
request to reenter the core dynamic retention mode. 


A4.6.5 Debug recovery mode 
The debug recovery mode can be used to assist debug of external watchdog-triggered reset events. 


It allows contents of the core L1 data cache that was present before the reset to be observable after the 
reset. The contents of the L1 cache are retained and are not altered on the transition back to the On mode. 


By default, the core invalidates its caches when power-on reset (nCPUPORESET) is deasserted. If the 
P-Channel is initialized to the debug recovery mode, and the core is cycled through power-on reset along 
with the system power-on reset, then the cache invalidation is disabled. The cache contents are preserved 
when the core is transitioned to the On mode. 


Debug recovery mode also supports preserving RAS state, in addition to the cache contents. In this case, 
a transition to the debug recovery mode is made from any of the current states. Once in debug recovery 
mode, the core is cycled through a warm reset with the system warm reset. The RAS and cache state are 
preserved when the core is transitioned to the On mode. 


This mode is strictly for debug purposes. It must not be used for functional purposes, as correct operation 
of the L1 cache is not guaranteed when entering this mode. 


Note 
This mode can occur at any time with no guarantee of the state of the core. A P-Channel request of this 


type is accepted immediately, therefore its effects on the core, cluster, or the wider system are 
UNPREDICTABLE, and a wider system reset might be required. In particular, if there were outstanding 
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A4 Power management 
A4.6 Core power modes 


memory system transactions at the time of the reset, then these may complete after the reset when the 
core is not expecting them and cause a system deadlock. 
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Encoding for power modes 


A4 Power management 
A4.7 Encoding for power modes 


The following table shows the encodings for the supported modes for each core domain P-Channel. 



































Table A4-2 Core power modes COREPSTATE encoding 
Power mode Short name PACTIVE bit PSTATE value *| Power mode description 
number 
Debug recovery DEBUG_RECOV | - 0b9e1010 Logic is off (or in reset), RAM state is retained 
and not invalidated when transitioning to On 
mode. 
On ON 8 0bee1000 All powerup. 
Core dynamic FULL_RET 5 @bee0101 Logic and RAM state are inoperable but retained. 
retention 
Off (emulated) OFF_EMU 1 @bee0001 On with Warm reset asserted, debug state is 
retained and accessible. 
Off OFF 0 (implicit)? ebeeeeee All powerdown. 











a PSTATE[5:4] are don't care. 
It is tied off to 0 and should be inferred when all other PACTIVE bits are LOW. For more information, see the AMBA® Low Power Interface Specification Arm® Q- 
Channel and P-Channel Interfaces. 
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A4.8 Power domain states for power modes 


A4.8 Power domain states for power modes 


The power domains can be controlled independently to give different combinations when powered-up 
and powered-down. 


However, only some powered-up and powered-down domain combinations are valid and supported. The 
following information shows the supported power domain states for the Cortex-A76 core. 


The PDCPU power domain supports the power states described in the following table. 


Table A4-3 Power state description 





Power state | Description 











Off Core off. Power to the block is gated. 
Ret Core retention. Logic and RAM retention power only. 
On Core on. Block is active. 














Caution 
States that are not shown in the following tables are unsupported and must not occur. 





The following table describes the power modes, and the corresponding power domain states for 
individual cores. The power mode of each core is independent of all other cores in the cluster. 


Table A4-4 Supported core power domain states 




















Power mode Power domain state | Description 
Debug recovery On Core on. 

On On Core on. 

Core dynamic retention | Ret Core in retention. 
Off (emulated) On Core on. 

Off Off Core off. 

















Deviating from the legal power modes can lead to UNPREDICTABLE results. You must comply with the 
dynamic power management and powerup and powerdown sequences described in the following 
sections. 
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A4.9 Power up and down sequences 


A4.9 Power up and down sequences 


The following approach allows taking the Cortex-A76 cores in the cluster in and out of coherence. 


Core powerdown 


To take a core out of coherence ready for core powerdown, the following power down steps must be 
performed: 


1. Save all architectural states. 

2. Configure the GIC distributor to disable or reroute interrupts away from this core. 

3. Set the CPUPWRCTLR.CORE PWRDN EN bit to | to indicate to the power controller that a 
powerdown is requested. 

4. Execute an ISB instruction. 

5. Execute a WFI instruction. 

All L1 and L2 cache disabling, L1 and L2 cache flushing, and communication with the L3 memory 

system is performed in hardware after the WFI is executed, under the direction of the power controller. 


Note 
Executing any WFI instruction when the CPUPWRCTLR.CORE PWRDN EN bit is set automatically 
masks out all interrupts and wake-up events in the core. If executed when the 
CPUPWRCTLR.CORE PWRDN EN bit is set the WFI never wakes up and the core needs to be reset to 
restart. 








For information about cluster powerdown, see the Arm® DynamIQ™ Shared Unit Technical Reference 
Manual. 


Core powerup 
To bring a core into coherence after reset, no software steps are required. 


Related references 
B2.32 CPUPWRCTLR_EL1, Power Control Register, ELI on page B2-190 
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A4.10 Debug over powerdown 


A4.10 Debug over powerdown 


The Cortex-A76 core supports debug over powerdown, which allows a debugger to retain its connection 
with the core even when powered down. This enables debug to continue through powerdown scenarios, 
rather than having to re-establish a connection each time the core is powered up. 


The debug over powerdown logic is part of the DebugBlock, which is external to the cluster, and must 
remain powered on during the debug over powerdown process. 


See the Arm® DynamIO™ Shared Unit Technical Reference Manual. 
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A4.10 Debug over powerdown 
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Chapter A5 
Memory Management Unit 


This chapter describes the Memory Management Unit (MMU) of the Cortex-A76 core. 


It contains the following sections: 

¢ A5.1 About the MMU on page AS-62. 

¢ A5.2 TLB organization on page A5-64. 

¢ A5.3 TLB match process on page A5-65. 

¢ A5.4 Translation table walks on page A5-66. 

¢ A5.5 MMU memory accesses on page A5-67. 

¢ A5.6 Specific behaviors on aborts and memory attributes on page A5-68. 
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A5.1 About the MMU 


The Memory Management Unit (MMU) is responsible for translating addresses of code and data Virtual 
Addresses (VA) to Physical Addresses (PAs) in the real system. The MMU also controls memory access 
permissions, memory ordering, and cache policies for each region of memory. 


A5.1.1 Main functions 


The three main functions of the MMU are to: 


Control the table walk hardware that accesses translation tables in main memory. 

Translate Virtual Addresses (VAs) to Physical Addresses (PAs). 

Provide fine-grained memory system control through a set of virtual-to-physical address mappings 
and memory attributes that are held in translation tables. 


Each stage of address translation uses a set of address translations and associated memory properties that 
are held in memory mapped tables called translation tables. Translation table entries can be cached into a 
Translation Lookaside Buffer (TLB). 


The following table describes the components included in the MMU. 


Table A5-1 TLBs and TLB caches in the MMU 





Component 


Description 





Instruction L1 TLB 


48 entries, fully associative. 





Data L1 TLB 


48 entries, fully associative. 





L2 TLB cache 


1280 entries, 5-way set associative. 








Translation table prefetcher | Detects access to contiguous translation tables and prefetches the next one. This prefetcher can be 


disabled in the ECTLR register. 











The TLB entries contain either one or both of a global indicator and an Address Space Identifier (ASID) 
to permit context switches without requiring the TLB to be invalidated. 


The TLB entries contain a Virtual Machine Identifier (VMID) to permit virtual machine switches by the 
hypervisor without requiring the TLB to be invalidated. 


A5.1.2 AArch64 behavior 


The Cortex-A76 core is an Armv8 compliant core that supports execution in AArch64 state. 


The following table shows the AArch64 behavior. 


Table A5-2 AArch64 behavior 





AArch64 





Address translation 
system 


The Armv8 address translation system resembles an extension to the Long descriptor format address 
translation system to support the expanded virtual and physical address space. 





Translation granule 


4KB, 16KB, or 64KB for Armv8 Virtual Memory System Architecture (VMSA) 














ASID size 8 or 16 bits depending on the value of TCR_ELx.AS. 
VMID size 8 or 16 bits depending on the value of VTCR_EL2.VS. 
PA size Maximum 40 bits. 





Any configuration of TCR_ELx.IPS over 40 bits is considered as 40 bits. You can enable or disable each 
stage of the address translation independently. 
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A5 Memory Management Unit 
A5.1 About the MMU 


The Cortex-A76 core also supports the Virtualization Host Extension (VHE) including ASID space for 
EL2. When VHE is implemented and enabled, EL2 has the same behavior as EL1. 


See the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile for more 
information on concatenated translation tables and for address translation formats. 
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A5.2 TLB organization 


The TLB is a cache of recently executed page translations within the MMU. The Cortex-A76 core 
implements a two-level TLB structure. The TLB stores all page sizes and is responsible for breaking 
these down in to smaller pages when required for the data or instruction L1 TLB. 


A5.2.1 Instruction L1 TLB 


The instruction L1 TLB is implemented as a 48-entry fully associative structure. This TLB caches entries 
at the 4KB, 16K B, 64KB, 2MB, and 32MB granularity of VA to PA mapping only. 


A hit in the instruction L1 TLB provides a single CLK cycle access to the translation, and returns the PA 
to the instruction cache for comparison. It also checks the access permissions to signal an Instruction 
Abort. 


A5.2.2 Data L1 TLB 


The data L1 TLB is a 48-entry fully associative TLB that is used by load and store operations. The cache 
entries have 4KB, 16KB, 64KB, 2MB, and 512MB granularity of VA to PA mappings only. 


A hit in the data L1 TLB provides a single CLK cycle access to the translation, and returns the PA to the 
data cache for comparison. It also checks the access permissions to signal a Data Abort. 


A5.2.3 L2 TLB 


The L2 TLB structure is shared by instruction and data. It handles misses from the instruction and data 
L1 TLBs. 


The following table describes the characteristic that applies to the L2 TLB. 


Table A5-3 Characteristic of the L2 TLB 





Characteristic 


Note 





1280-entry cache 





5-way, set associative, Stores: 


« VA to PA mappings for 4KB, 16KB, 64KB, 2MB, 32MB, 512MB, and 1GB block sizes. 

¢ Intermediate physical address (IPA) to PA mappings for 2MB and 1GB (in a 4KB translation 
granule), 32MB (in a 16K translation granule), and 512MB (in a 64K granule) block sizes. Only 
Non-secure EL1 and ELO stage 2 translations are cached. 

¢ Intermediate PAs obtained during a translation table walk. 











Access to the L2 TLB usually takes three cycles. If a different page or block size mapping is used, then 
access to the L2 TLB can take longer. 


The L2 TLB supports four translation table walks in parallel (four TLB misses), and can service two 
TLB lookups while the translation table walks are in progress. If there are six successive misses, the L2 
TLB will stall. 

Note 
The main TLB is invalidated automatically at reset unless the DISCACHEINVLD signal is set HIGH 
when the Cortex-A76 core is reset. This signal must only be used in diagnostic mode. If caches are not 


invalidated on reset, their functionality cannot be guaranteed. See the Arm® DynamIQ™ Shared Unit 
Technical Reference Manual for more information on DISCACHEINVLD. 
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A5 Memory Management Unit 
A5.3 TLB match process 


A5.3 TLB match process 


The Armv8-A architecture provides support for multiple maps from the VA space that are translated 
differently. 


TLB entries store the context information required to facilitate a match and avoid the need for a TLB 
flush on a context or virtual machine switch. 


Each TLB entry contains a: 


« VA, 
* PA. 
¢ Set of memory properties that include type and access permissions. 


Each entry is either associated with a particular ASID or global. In addition, each TLB entry contains a 
field to store the VMID in the entry applicable to accesses from Non-secure ELO and EL1 Exception 
levels. 


Each entry is associated with a particular translation regime. 


¢ EL3 in Secure state in AArch64 state only. 
¢« EL2 or ELO in Non-secure state. 

¢ ELI or ELO in Secure state. 

¢« ELI or ELO in Non-secure state. 


A TLB match entry occurs when the following conditions are met: 

¢ Its VA, moderated by the page size such as the VA bits[48:N], where N is log» of the block size for 
that translation that is stored in the TLB entry, matches the requested address. 

¢ Entry translation regime matches the current translation regime. 

¢ The ASID matches the current ASID held in the CONTEXTIDR, TTBRO, or TTBR1 register, or the 
entry is marked global. 

¢« The VMID matches the current VMID held in the VTTBR_EL2 register. 

¢ The ASID and VMID matches are IGNorED when ASID and VMID are not relevant. 
ASID is relevant when the translation regime is: 
— EL2 in Non-secure state with HCR_EL2.E2H and HCR_EL2.TGE set to 1. 
— ELI or ELO in Secure state. 
— ELI or ELO in Non-secure state. 


VMID is relevant for EL1 or ELO in Non-secure state. 
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A5 Memory Management Unit 
A5.4 Translation table walks 


A5.4 Translation table walks 
When the Cortex-A76 core generates a memory access, the MMU: 


1. Performs a lookup for the requested VA, current ASID, current VMID, and current translation regime 
in the relevant instruction or data. 

2. If there is a miss in the relevant L1 TLB, the MMU performs a lookup for the requested VA, current 
ASID, current VMID, and translation regime. 

3. If there is a miss in the L2 TLB, the MMU performs a hardware translation table walk. 


In the case of a L2 TLB miss, the hardware does a translation table walk as long as the MMU is enabled, 
and the translation using the base register has not been disabled. 


If the translation table walk is disabled for a particular base register, the core returns a Translation Fault. 
If the TLB finds a matching entry, it uses the information in the entry as follows. 


The access permission bits determine if the access is permitted. If the matching entry does not pass the 
permission checks, the MMU signals a Permission fault. See the Arm® Architecture Reference Manual 
Armv6, for Armv8-A architecture profile for details of Permission faults, including: 

« A description of the various faults. 

¢ The fault codes. 

¢ Information regarding the registers where the fault codes are set. 


This section contains the following subsection: 
¢ A5.4.1 AArch64 behavior on page A5-66. 


A5.4.1 AArch64 behavior 


When executing in AArch64 state at a particular Exception level, you can configure the hardware 
translation table walk to use either the 4KB, 16KB, or 64KB translation granule. Program the Translation 
Granule bit, TGO, in the appropriate translation control register: 


* TCR ELI. 
* TCR EL2. 
* TCR EL3. 
* VTCR_EL2. 


For TCR_EL1, you can program the Translation Granule bits TGO and TG1 to configure the translation 
granule respectively for TTBRO_EL1 and TTBR1_ EL1, or TCR_EL2 when VHE is enabled. 
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A5.5 MMU memory accesses 


During a translation table walk, the MMU generates accesses. This section describes the specific 
behaviors of the core for MMU memory accesses. 


A5.5.1 Configuring MMU accesses 


By programming the IRGN and ORGN bits, you can configure the MMU to perform translation table 
walks in cacheable or non-cacheable regions: 


AArch64 Appropriate TCR_EL-x register. 

If the encoding of both the ORGN and IRGN bits is Write-Back, the data cache lookup is performed and 

data is read from the data cache. External memory is accessed, if the ORGN and IRGN bit contain 

different attributes, or if the encoding of the ORGN and IRGN bits is Write-Through or Non-cacheable. 
A5.5.2 Descriptor hardware update 


The core supports hardware update in AArch64 state using hardware management of the access flag and 
hardware management of dirty state. 


These features are enabled in registers TCR_ELx and VTCR_EL2. 
Hardware management of the Access flag is enabled by the following configuration fields: 


¢ TCR_ELx.HA for stage | translations. 
¢ WVTCR_EL2.HA for stage 2 translations. 


Hardware management of dirty state is enabled by the following configuration fields: 
¢ TCR _ELx.HD for stage | translations. 
« VTCR_EL2.HD for stage 2 translations. 

Note 


Hardware management of dirty state can only be enabled if hardware management of the Access flag is 
enabled. 








To support the hardware management of dirty state, the DBM field is added to the translation table 
descriptors as part of Armv8.1 architecture. 


The core supports hardware update only in outer Write-Back and inner Write-Back memory regions. 


If software requests a hardware update in a memory region that is not inner Write-Back or not outer 
Write-Back, then the core returns an abort with the following encoding: 

¢ ESR.ELx.DFSC = @b110001 for Data Aborts in AArch64. 

¢ ESR.ELx.IFSC = @b110001 for Instruction Aborts in AArch64. 
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A5.6 Specific behaviors on aborts and memory attributes 


This section describes specific behaviors caused by aborts and also describes memory attributes. 


MMU responses 
When one of the following translation is completed, the MMU generates a response to the requester: 


© ALI TLB hit. 
© AL2 TLB hit. 
¢ A translation table walk. 


The response from the MMU contains the following information: 

¢ The PA corresponding to the translation. 

* A set of permissions. 

* Secure or Non-secure. 

¢ All the information required to report aborts. See the Arm® Architecture Reference Manual Armvé, for 
Armv8-A architecture profile for more details. 


A5.6.1 External aborts 


External aborts are defined as those that occur in the memory system rather than those that the MMU 
detects. Normally, external memory aborts are rare. External aborts are caused by errors flagged to the 
external interface. 


When an external abort to the external interface occurs on an access for a translation table walk access, 
the MMU returns a synchronous external abort. For a load multiple or store multiple operation, the 
address captured in the fault address register is that of the address that generated the synchronous 
external abort. 


See the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile for more 
information. 


A5.6.2 Mis-programming contiguous hints 


In the case of a mis-programming contiguous hint, when there is a descriptor that contains a set CH bit, 
all contiguous VAs contained in this block should be included in the input VA address space that is 
defined for stage 1 by TxSZ for TTBx or for stage 2 by {SLO, TOSZ}. 


The Cortex-A76 core treats such a block as not causing a translation fault. 


A5.6.3 Memory attributes 


The memory region attributes specified in the TLB entry, or in the descriptor in case of translation table 
walk, determine if the access is: 


¢« Normal Memory or Device type. 

¢ One of the four different device memory types that are defined for Armv8: 
Device-nGnRnE Device non-Gathering, non-Reordering, No Early Write Acknowledgment. 
Device-nGnRE Device non-Gathering, non-Reordering, Early Write Acknowledgment. 
Device-nGRE Device non-Gathering, Reordering, Early Write Acknowledgment. 
Device-GRE Device Gathering, Reordering, Early Write Acknowledgment. 


In the Cortex-A76 core, a page is cacheable only if the inner memory attribute and outer memory 
attribute are Write Back. In all other cases, all pages are downgraded to Non-cacheable Normal memory. 


When the MMU is disabled at stage 1 and stage 2, and SCTLR.I is set to 1, instruction prefetches are 
cached in the instruction cache but not in the unified cache. In all other cases, normal behavior on 
memory attribute applies. 
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A5 Memory Management Unit 
A5.6 Specific behaviors on aborts and memory attributes 


See the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile for more 
information on translation table formats. 





100798 _0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights A5-69 
reserved. 
Non-Confidential 


A5 Memory Management Unit 
A5.6 Specific behaviors on aborts and memory attributes 
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Chapter A6 
Level 1 memory system 


This chapter describes the L1 instruction cache and data cache that make up the LI memory system. 


It contains the following sections: 

¢ A6.1 About the LI memory system on page A6-72. 

¢ A6.2 Cache behavior on page A6-73. 

¢ A6.3 L1 instruction memory system on page A6-75. 

¢ A6.4L1 data memory system on page A6-77. 

¢ A6.5 Data prefetching on page A6-79. 

¢ A6.6 Direct access to internal memory on page A6-80. 
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A6 Level 1 memory system 
A6.1 About the L1 memory system 


A6.1 About the L1 memory system 


The Cortex-A76 L1 memory system is designed to enhance core performance and save power. 


The Ll memory system consists of separate instruction and data caches. Both have a fixed size of 64KB. 


A6.1.1 L1 instruction-side memory system 


The L1 instruction memory system has the following key features: 


Virtually Indexed, Physically Tagged (VIPT), which behaves as a Physically Indexed, Physically 
Tagged (PIPT) 4-way set-associative L1 data cache. 

Fixed cache line length of 64 bytes. 

Pseudo-LRU cache replacement policy. 

256-bit read interface from the L2 memory system. 


A6.1.2 L1 data-side memory system 


The L1 data memory system has the following features: 


Virtually Indexed, Physically Tagged (VIPT), which behaves as a Physically Indexed, Physically 
Tagged (PIPT) 4-way set-associative L1 data cache. 

Fixed cache line length of 64 bytes. 

Pseudo-LRU cache replacement policy. 

256-bit write interface from the L2 memory system. 

256-bit read interface from the L2 memory system. 

Two 128-bit read paths from the data L1 memory system to the datapath. 

256-bit write path from the datapath to the L1 memory system. 
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A6 Level 1 memory system 
A6.2 Cache behavior 


A6.2 Cache behavior 


The IMPLEMENTATION SPECIFIC features of the instruction and data caches include: 


« Atreset the instruction and data caches are disabled and both caches are automatically invalidated. 


Note 


The L1 instruction and data caches are invalidated automatically at reset unless the DISCACHEINVLD 

signal is set HIGH when the Cortex-A76 core is reset. This signal must only be used in diagnostic mode. 
If caches are not invalidated on reset, their functionality cannot be guaranteed. See the Arm® DynamIQ™ 

Shared Unit Technical Reference Manual for more information on DISCACHEINVLD. 








« You can enable or disable each cache independently. 
¢ Cache lockdown is not supported. 
¢ Onacache miss, data for the cache linefill is requested in critical word-first order. 


A6.2.1 Instruction cache disabled behavior 


If the instruction cache is disabled, fetches cannot access any of the instruction cache arrays. An 
exception is the instruction cache maintenance operations. If the instruction cache is disabled, the 
instruction cache maintenance operations can still execute normally. 


If the instruction cache is disabled, all instruction fetches to cacheable memory are treated as if they were 
non-cacheable. This treatment means that instruction fetches might not be coherent with caches in other 
cores, and software must take account of this. 


A6.2.2 Instruction cache speculative memory accesses 


Instruction fetches are speculative, as there can be several unresolved branches in the pipeline. There is 
no execution guarantee. 


A branch instruction or exception in the code stream can cause a pipeline flush, discarding the currently 
fetched instructions. On instruction fetch accesses, pages with Device memory type attributes are treated 
as Non-Cacheable Normal Memory. 


Device memory pages must be marked with the translation table descriptor attribute bit Execute Never 
(XN). The device and code address spaces must be separated in the physical memory map. This 
separation prevents speculative fetches to read-sensitive devices when address translation is disabled. 


If the instruction cache is enabled, and if the instruction fetches miss in the L1 instruction cache, they can 
still look up in the L1 data caches. However, a new line is not allocated in the data cache unless the data 
cache is enabled. 


See the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile for more 
information. 


A6.2.3 Data cache disabled behavior 


If the data cache is disabled, load and store instructions do not access any of the L1 data, L2 cache, and, 
if present, the DSU L3 cache arrays. 


Unless the data cache is enabled, a new line is not allocated in the L2 or L3 caches due to an instruction 
fetch 


Data cache maintenance operations are an exception. If the data cache is enabled, the data cache 
maintenance operations execute normally. 


If the data cache is disabled, all loads and store instructions to cacheable memory are treated as if they 
were non-cacheable. Therefore, they are not coherent with the caches in this core or the caches in other 
cores, and software must take this into account. 


The L2 and L1 data caches cannot be disabled independently. 
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A6 Level 1 memory system 
A6.2 Cache behavior 


A6.2.4 Data cache maintenance considerations 


DC IVAC operations in AArch64 state are treated as DC CIVAC except for permission checking and 
watchpoint matching. 


DC ISW operations in AArch64 state, perform both a clean and invalidate of the target set/way. The 
values of HCR.SWIO and HCR_EL2.SWIO have no effect. 


See the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile for more 
information. 


A6.2.5 Data cache coherency 


To maintain data coherency between multiple cores, the Cortex-A76 core uses the MESI protocol. 


A6.2.6 Write streaming mode 
A cache line is allocated to the L1 on either a read miss or a write miss. 


However, there are some situations where allocating on writes is not required. For example, when 
executing the C standard library memset() function to clear a large block of memory to a known value. 
Writes of large blocks of data can pollute the cache with unnecessary data. It can also waste power and 
performance if a linefill must be performed only to discard the linefill data because the entire line was 
subsequently written by the memset(). 


To counter this, the L1 memory system includes logic to detect when the core has stores pending to a full 
cache line when it is waiting for a linefill to complete, or when it detects a DCZVA (full cache line write to 
zero). If this situation is detected, then it switches into write streaming mode. 


When in write streaming mode, loads behave as normal, and can still cause linefills, and writes still 
lookup in the cache, but if they miss then they write out to L2 (or possibly L3, system cache, or DRAM) 
rather than starting a linefill. 


The Ll memory system continues in write streaming mode until it can no longer create a full cacheline 
of store (for example because of a lack of resource in the L1 memory system) or has detected a high 
proportion of store hitting in the cache. 

Note 


The Ll memory system is monitoring transaction traffic through L1 and, depending on different 
thresholds, can set a stream to go out to L2, L3, and system cache and DRAM. 








The following registers control the different thresholds: 


AArch64 state 
CPUECTLR_EL]1 configure the L2, L3, and L4 write streaming mode threshold. See 
B2.27 CPUECTLR_EL1, CPU Extended Control Register, EL1 on page B2-174. 
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A6.3 L1 instruction memory system 
The L1 instruction side memory system provides an instruction stream to the decoder. 


To increase overall performance and to reduce power consumption, it uses: 
¢ Dynamic branch prediction. 
¢ Instruction caching. 


A6.3.1 Program flow prediction 
The Cortex-A76 core contains program flow prediction hardware, also known as branch prediction. 


Branch prediction increases overall performance and reduces power consumption. With program flow 
prediction disabled, all taken branches incur a penalty that is associated with flushing the pipeline. 


To avoid this penalty, the branch prediction hardware predicts if a conditional or unconditional branch is 
to be taken. For conditional branches, the hardware predicts if the branch is to be taken. It also predicts 
the address that the branch goes to, known as the branch target address. For unconditional branches, only 
the target is predicted. 


The hardware contains the following functionality: 

¢ A Branch Target Buffer (BTB) holding the branch target address of previously taken branches. 
¢ Dynamic branch predictor history. 

¢ The return stack, a stack of nested subroutine return addresses. 

¢ A static branch predictor. 

¢ An indirect branch predictor. 


Predicted and non-predicted instructions 


Unless otherwise specified, the following list applies to A64, A32, and T32 instructions. As a rule the 
flow prediction hardware predicts all branch instructions regardless of the addressing mode, and 
includes: 


¢ Conditional branches. 

¢ Unconditional branches. 

¢ Indirect branches that are associated with procedure call and return instructions. 
¢ Branches that switch between A32 and T32 states. 


The following branch instructions are not predicted: 
¢ Exception return instructions. 


T32 state conditional branches 


A T32 unconditional branch instruction can be made conditional by inclusion in an Jf-Then (IT) block. It 
is then treated as a conditional branch. 


Return stack 
The return stack stores the address and instruction set state. 
This address is equal to the link register value stored in R14 in AArch32 state or X30 in AArch64 state. 


The following instructions cause a return stack push if predicted: 
¢ BL ri14 

* BLX (immediate) in AArch32 state 

* BLX (register) in AArch32 state 

* BLR in AArch6é4 state 

¢ MOV pc,ri4 


In AArch32 state, the following instructions cause a return stack pop if predicted: 
° BX 
e LDR pc, [r13], #imm 
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A6 Level 1 memory system 
A6.3 L1 instruction memory system 


¢ LDM r13, {...pc} 
¢ LDM r13, {...pc} 
In AArch64 state, the RET instruction causes a return stack pop. 


As exception return instructions can change core privilege mode and security state, they are not 
predicted. These include: 
¢  ERET 
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A6.4 


A6.4.1 


A6 Level 1 memory system 
A6.4 L1 data memory system 


L1 data memory system 


The L1 data cache is organized as a Virtually Indexed, Physically Tagged (VIPT) cache featuring four 
ways. 


Data cache invalidate on reset 


The Armv8-A architecture does not support an operation to invalidate the entire data cache. If 
software requires this function, it must be constructed by iterating over the cache geometry and 
executing a series of individual invalidate by set/way instructions. 


Memory system implementation 


This section describes the implementation of the L1 memory system. 


Limited Order Regions 


The core offers support for four limited ordering region descriptors, as introduced by the Armv8.1 
Limited Ordering Regions. 


Atomic instructions 
The Cortex-A76 core supports the atomic instructions added in Armv8.1 architecture. 


Atomic instructions to cacheable memory can be performed as either near atomics or far atomics, 
depending on where the cache line containing the data resides. 


When an instruction hits in the L1 data cache in a unique state, then it is performed as a near atomic in 
the L1 memory system. If the atomic operation misses in the L1 cache, or the line is shared with another 
core, then the atomic is sent as a far atomic on the core CHI interface. 


If the operation misses everywhere within the cluster, and the interconnect supports far atomics, then the 
atomic is passed on to the interconnect to perform the operation. 


When the operation hits anywhere inside the cluster, or when an interconnect does not support atomics, 
the L3 memory system performs the atomic operation. If the line it is not already there, it allocates the 
line into the L3 cache. This depends on whether the DSU is configured with an L3 cache. 


Therefore, if software prefers that the atomic is performed as a near atomic, precede the atomic 
instruction with a PLDW or PRFM PSTL1KEEP instruction. 


Alternatively, CPUECTLR can be programmed such that different types of atomic instructions attempt to 
execute as a near atomic. One cache fill will be made on an atomic. If the cache line is lost before the 
atomic operation can be made, it will be sent as a far atomic. 


The Cortex-A76 core supports atomics to device or non-cacheable memory, however this relies on the 
interconnect also supporting atomics. If such an atomic instruction is executed when the interconnect 
does not support them, it will result in an abort. 


For more information on the CPUECTLR register, see B2.27 CPUECTLR_EL1, CPU Extended Control 
Register, ELI on page B2-174. 


LDAPR instructions 


The core supports Load acquire instructions adhering to the RCpc consistency semantic introduced in the 
Armv8.3 extensions for A profile. This is reflected in register ID AA64ISARI_EL1 where bits[23:20] 
are set to @b@@01 to indicate that the core supports LDAPRB, LDAPRH, and LDAPR instructions implemented 
in AArch64. 


Transient memory region 


The core has a specific behavior for memory regions that are marked as write-back cacheable and 
transient, as defined in the Armv8.0 architecture. 
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A6.4 L1 data memory system 


For any load or store that is targeted at a memory region that is marked as transient, the following occurs: 

¢ Ifthe memory access misses in the L1 data cache, the returned cache line is allocated in the L1 data 
cache but is marked as transient. 

¢ When the line is evicted from the L1 data cache, the transient hint is passed to the L2 cache so that 
the replacement policy will not attempt to retain the line. When the line is subsequently evicted from 
the L2 cache, it will bypass the L3 cache entirely. 


Non-temporal loads 


Non-temporal loads indicate to the caches that the data is likely to be used for only short periods. For 
example, when streaming single-use read data that is then discarded. In addition to non-temporal loads, 
there are also prefetch-memory (PRFM) hint instructions with the STRM qualifier. 


Non-temporal loads to memory which are designated as Write-Back are treated the same as loads to 
Transient memory. 


A6.4.2 Internal exclusive monitor 
The Cortex-A76 core L1 memory system has an internal exclusive monitor. 


This monitor is a 2-state, open and exclusive, state machine that manages Load-Exclusive or Store- 
Exclusive accesses and Clear-Exclusive (CLREX) instructions. You can use these instructions to construct 
semaphores, ensuring synchronization between different processes running on the core, and also between 
different cores that are using the same coherent memory locations for the semaphore. A Load-Exclusive 
instruction tags a small block of memory for exclusive access. CTR.ERG defines the size of the tagged 
block as 16 words, one cache line. 


Note 
A load/store exclusive instruction is any one of the following: 
¢ In the A64 instruction set, any instruction that has a mnemonic starting with LDX, LDAX, STX, or STLX. 


¢ In the A32 and T32 instruction sets, any instruction that has a mnemonic starting with LDREX, STREX, 
LDAEX, or STLEX. 








See the Arm® Architecture Reference Manual Armv8, for Armv8s-A architecture profile for more 
information about these instructions. 
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A6.5 Data prefetching 


This section describes the data prefetching behavior for the Cortex-A76 core. 


Preload instructions 


The Cortex-A76 core supports the AArch64 Prefetch Memory (PRFM) instructions and the AArch32 
Prefetch Data (PLD) and Preload Data With Intent To Write (PLDW) instructions. These instructions signal 
to the memory system that memory accesses from a specified address are likely to occur soon. The 
memory system acts by taking actions that aim to reduce the latency of the memory access when they 
occur. PRFM instructions perform a lookup in the cache, and if they miss and are to a cacheable address, a 
linefill starts. However, the PRFM instruction retires when its linefill is started, rather than waiting for the 
linefill to complete. This enables other instructions to execute while the linefill continues in the 
background. 


The Preload Instruction (PLI) memory system hint performs preloading in the L2 cache for cacheable 
accesses if they miss in both the L1 instruction cache and L2 cache. Instruction preloading is performed 
in the background. 


For more information about prefetch memory and preloading caches, see the Arm® Architecture 
Reference Manual Armvé, for Armv8-A architecture profile. 


Data prefetching and monitoring 


The load-store unit includes a hardware prefetcher that is responsible for generating prefetches targeting 
both the L1 and the L2 cache. The load side prefetcher uses the virtual address to prefetch to both the L1 
and L2 Cache. The store side prefetcher uses the physical address, and only prefetches to the L2 Cache. 


The CPUECTLR register allows you to have some control over the prefetcher. See 
B2.27 CPUECTLR_ELI, CPU Extended Control Register, ELI on page B2-174 for more information on 
the control of the prefetcher. 


Use the prefetch memory system instructions for data prefetching where short sequences or irregular 
pattern fetches are required. 


Data cache zero 
The Armv8-A architecture introduces a Data Cache Zero by Virtual Address (DC ZVA) instruction. 


In the Cortex-A76 core, this enables a block of 64 bytes in memory, aligned to 64 bytes in size, to be set 
to zero. 


For more information, see the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture 
profile. 





100798 _0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights A6-79 
reserved. 
Non-Confidential 


A6 Level 1 memory system 
A6.6 Direct access to internal memory 


A6.6 Direct access to internal memory 


The Cortex-A76 core provides a mechanism to read the internal memory that is used by the L1 caches, 
L2 cache, and TLB structures through IMPLEMENTATION DEFINED system registers. This functionality can be 
useful when debugging software or hardware issues. 


When the core executes in AArch64 state, there are six read-only registers that are used to access the 
contents of the internal memory. The internal memory is selected by programming the implementation- 
defined RAMINDEX register (using SYS #6, c15, c0, #0 instruction). These operations are available 
only in EL3. In all other modes, executing these instructions results in an Undefined Instruction 
exception. The data is read from read-only registers as shown in the following table. 


Table A6-1 AArch64 registers used to access internal memory 





Register name | Function 


Access 


Operation 


Rd Data 





IDATAO_EL3 


Instruction Register 0 


Read-only | S3_6_c15_c®@_®| Data 





IDATA1_ EL3 


Instruction Register 1 


Read-only | S3_6_c15_c@_1| Data 





IDATA2_EL3 


Instruction Register 2 


Read-only | S3_6_c15_c®@_2 | Data 





DDATAO_EL3 


Data Register 0 


Read-only | $3_6_c15_c1_@| Data 





DDATA1 EL3 


Data Register 1 


Read-only | $3_6_c15_c1_1 | Data 





DDATA2_EL3 


Data Register 2 


Read-only | S3_6_c15_c1_2| Data 




















A6.6.1 Encoding for L1 instruction cache tag, L1 instruction cache data, L1 BTB, L1 GHB, L1 TLB 


instruction, and BPIQ 


The following tables show the encoding required to select a given cache line. 


Table A6-2 L1 instruction cache tag location encoding 





























Bit fields of Rd Description 
[31:24] RAMID = @xe@e 
[23:20] Reserved 
[19:18] Way 

[17:14] Reserved 

[13:6] Index [13:6] 
[5:0] Reserved 








Table A6-3 L1 instruction cache data location encoding 























Bit fields of Rd Description 
[31:24] RAMID = @x@1 
[23:20] Reserved 
[19:18] Way 

[17:14] Reserved 

[13:3] Index [13:3] 
[2:0] Reserved 
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Table A6-4 L1 BTB data location encoding 


























Bit fields of Rd Description 
[31:24] RAMID = ®x@2 
[23:20] Reserved 
[19:18] Way 

[17:15] Reserved 

[14:5] Index [14:5] 
[4:0] Reserved 











Table A6-5 L1 GHB data location encoding 




















Bit fields of Rd Description 
[31:24] RAMID = @x@3 
[23:14] Reserved 

[13:4] Index [13:4] 
[3:0] Reserved 











Table A6-6 L1 instruction TLB data location encoding 

















Bit fields of Rd Description 
[31:24] RAMID = 0x04 
[23:8] Reserved 

[7:0] TLB Entry (<=47) 











Table A6-7 BPIQ data location encoding 




















Bit fields of Rd Description 
[31:24] RAMID = @x@5 
[23:10] Reserved 

[9:4] Index [5:0] 
[3:0] Reserved 











The following table shows the data that is returned from accessing the L1 instruction tag RAM. 
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Table A6-8 L1 instruction cache tag format 


























Register Bit field Description 
Instruction Register 0 [31] Non-secure identifier for the physical 
address 
[30:3] Physical address [39:12] 
[2:1] Instruction state [1:0] 
00 Invalid 
01 T32 
10 A32 
11 A64 
[0] Parity 
Instruction Register 1 [63:0] 0 
Instruction Register 2 [63:0] 0 














The following table shows the data that is returned from accessing the L1 instruction data RAM. 


Table A6-9 L1 instruction cache data format 




















Register Bit field Description 
Instruction Register 0 [63:0] Data [63:0] 
Instruction Register 1 [63:9] 0 

[8] Parity 

[7:0] Data [71:64] 
Instruction Register 2 [63:0] 0 

















The following table shows the data that is returned from accessing the LI BTB RAM. 


Table A6-10 L1 BTB cache format 

















Register Bit field Description 
Instruction Register 0 [63:0] Data [63:0] 
Instruction Register 1 [63:18] 0 

[17:0] Data [81:64] 
Instruction Register 2 [63:0] 0 














The following table shows the data that is returned from accessing the LI GHB RAM. 
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Table A6-11 L1 GHB cache format 




















Register Bit field Description 
Instruction Register 0 [63:0] Data [63:0] 
Instruction Register 1 [63:32] 0 

[31:0] Data [95:64] 
Instruction Register 2 [63:0] 0 














The following table shows the data that is returned from accessing the L1 instruction TLB RAM. 
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Table A6-12 L1 instruction TLB cache format 





Register 


Bit field 


Description 








Instruction Register 0 


[63:59] 


Virtual address [16:12] 





[58:56] 


TLB attribute 





[55:53] 


Memory attributes: 


000 Device nGnRnE 

001 Device nGnRE 

010 Device nGRE 

011 Device GRE 

100 Non-cacheable 

101. Write-Back No-Allocate 
110 Write-Back Transient 


111 + Write-Back Read-Allocate and 
Write-Allocate 





[52:50] 


Page size: 


000 4KB 
001 16KB 
010 64KB 
011 256KB 
100 2MB 
101 32MB 


11x Reserved 





[49:46] 


TLB attribute 





[45] 


Outer-shared 





[44] 


Inner-shared 





[43:39] 


TLB attribute 





[38:23] 


ASID 





[22:7] 


VMID 





[6:5] 


Translation regime: 


00 Secure EL1/EL0 

01 Secure EL3 

10 = Non-secure EL1/ELO 
11 Non-secure EL2 





[4:1] 


TLB attribute 





[0] 


Valid 





Instruction Register 1 


[60] 


Non-secure 





[59:32] 


Physical address [39:12] 








[31:0] 








Virtual address[48:17] 
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The following table shows the data that is returned from accessing the BPIQ RAM. 


Table A6-13 BPIQ cache format 























Register Bit field Description 
Instruction Register 0 [63:0] Data [63:0] 
Instruction Register 1 [63:32] 0 

[31:0] Data [95:64] 
Instruction Register 2 [63:0] 0 











A6.6.2 Encoding for L1 data cache tag, L1 data cache data, and L1 TLB data 


The core data cache consists of a 4-way set-associative structure. 


The encoding, which is set in Rd in the appropriate MCR instruction, used to locate the required cache data 
entry for tag, data, and TLB memory is shown in the following tables. It is similar for both the tag RAM, 


data RAM, and TLB access. Data RAM access includes an additional field to locate the appropriate 


doubleword in the cache line. 


Tag RAM encoding includes an additional field to select which one of the two cache channels must be 
used to perform any access. 


Table A6-14 L1 data cache tag location encoding 
































Bit fields of Rd Description 

[31:24] RAMID = 0x@8 

[23:20] Reserved 

[19:18] Way 

[17] Copy 
0 Tag RAM associated with Pipe 0 
1 Tag RAM associated with Pipe 1 

[16:14] Reserved 

[13:6] Index [13:6] 

[5:0] Reserved 








Table A6-15 L1 data cache data location encoding 
































Bit fields of Rd Description 
[31:24] RAMID = @x@9 
[23:20] Reserved 
[19:18] Way 

[17:16] BankSel 

[15:14] Unused 

[13:6] Index [13:6] 
[5:0] Reserved 
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Table A6-16 L1 data TLB location encoding 














Bit fields of Rd Description 
[31:24] RAMID = @x@A 
[23:6] Reserved 

[5:0] TLB Entry (0->47) 














Data cache reads return 64 bits of data in Data Register 0, Data Register 1, and Data Register 2. If cache 
protection is supported, Data Register 2 is used to report ECC information using the format shown in the 
following tables. 


The following table shows the data that is returned from accessing the L1 data cache tag RAM with 



































ECC. 
Table A6-17 L1 data cache tag format with ECC 
Register Bit field Description 
Data Register 0 [63:41] 0 
[40:34] ECC 
[33] Non-secure identifier for the physical 
address 
[32:5] Physical address [39:12] 
[4:3] Reserved 
[2] Transient/(WBNA 
[1:0] MESI 
00 = Invalid 
01 Shared 
10 Exclusive 
11. Modified with respect to the L2 
cache 
Data Register 1 [63:0] 0 
Data Register 2 [63:0] 0 














The following table shows the data that is returned from accessing the L1 data cache tag RAM without 
ECC. 
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Table A6-18 L1 data cache tag format without ECC 
Register Bit field Description 
Data Register 0 [63:34] 0 
[33] Non-secure identifier for the physical 
address 
[32:5] Physical address [39:12] 
[4:3] Reserved 
[2] Transient/(WBNA 
[1:0] MESI 
00 Invalid 
01 Shared 
10 Exclusive 
11 Modified 
Data Register 1 [63:0] 0 
Data Register 2 [63:0] 0 














The following table shows the data that is returned from accessing the L1 data cache data RAM with 


Table A6-19 L1 data cache data format with ECC 















































Register Bit field Description 
Data Register 0 [63:0] Word1_data [31:0], Word0_data [31:0] 
Data Register 1 [63:0] Word3_ data [31:0], Word2_data [31:0] 
Data Register 2 [63:32] 0 
[31:0] Word3_poison, Word3_ecc [6:0], 
Word2_poison, Word2_ecc [6:0], 
Word1_poison, Word1_ecc [6:0], 
Word0_poison, Word0_ecc [6:0] 
The following table shows the data that is returned from accessing the L1 data cache data RAM without 
Table A6-20 L1 data cache data format without ECC 
Register Bit field Description 
Data Register 0 [63:0] Word1_data [31:0], Word0_data [31:0] 
Data Register 1 [63:0] Word3_ data [31:0], Word2_ data [31:0] 
Data Register 2 [63:0] 0 














The following table shows the data that is returned from accessing the L1 data TLB RAM. 
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Table A6-21 L1 data TLB cache format 





Register 


Bit field 


Description 





Data Register 0 


[63:62] 


Virtual address [13:12] 





[58] 


Outer-shared 





[57] 


Inner-shared 





[52:50] 


Memory attributes: 


000 Device nGnRnE 

001 Device nGnRE 

010 Device nGRE 

011 Device GRE 

100 Non-cacheable 

101. Write-Back No-Allocate 
110 Write-Back Transient 


111 + Write-Back Read-Allocate and 
Write-Allocate 





[38:36] 


Page size: 


000 4KB 

001 16KB 
010 64KB 
011 256KB 
100 Reserved 
101 2MB 

110 512MB 
111 Reserved 





[35] 


Non-secure 





[34:33] 


Translation regime: 


00 Secure EL1/EL0 

01 Secure EL3 

10 ~=Non-secure EL1/EL0 
11 Non-secure EL2 





[32:17] 


ASID 





[16:1] 


VMID 





[0] 


Valid 








Data Register 1 


[62:35] 


Physical address [39:12] 





[34:0] 





Virtual address[48:14] 











A6.6.3 


Encoding for the L2 unified cache 


The following tables show the encoding required to select a given cache line. 
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Table A6-22 L2 tag location encoding 


























Bit fields of Rd Description 
[31:24] RAMID = @x10 
[23:21] Reserved 
[20:18] Way (0->7) 
[17:16] Reserved 

[15:6] Index[15:6] 
[5:0] Reserved 











Table A6-23 L2 data location encoding 


























Bit fields of Rd Description 
[31:24] RAMID = @x11 
(23:21] Reserved 
[20:18] Way (0->7) 
[17:16] Reserved 

[15:4] Index[15:4] 
[3:0] Reserved 











Table A6-24 L2 victim location encoding 




















Bit fields of Rd Description 
[31:24] RAMID = @x12 
[23:16] Reserved 

[15:6] Index[15:6] 
[5:0] Reserved 











The following table shows the data that is returned from accessing the L2 tag RAM when L2 is 


configured with a 128KB cache size. 
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Table A6-25 L2 tag format with a 128KB L2 cache size 












































Register Bit field Description 
Data Register 0 [63:45] 0 
[44:38] ECC [6:0] if configured with ECC for a 
128KB L2 cache size, otherwise 0 
[37:12] Physical address [39:14] 
[11] Non-secure identifier for the physical 
address 
[10:9] Virtual index [13:12] 
[8:6] Reserved 
[5] Shareable 
[4] Outer allocation hint 
[3] L1 data cache valid 
[2:0] L2 State 
101 Modified 
001 Exclusive 
x11 Shared 
xx0 Invalid 
Data Register 1 [63:0] 0 
Data Register 2 [63:0] 0 














The following table shows the data that is returned from accessing the L2 tag RAM when L2 is 


configured with a 256KB cache size. 
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Table A6-26 L2 tag format with a 256KB L2 cache size 












































Register Bit field Description 
Data Register 0 [63:44] 0 
[43:37] ECC [6:0] if configured with ECC for a 
256KB L2 cache size, otherwise 0 
[36:12] Physical address [39:15] 
{11] Non-secure identifier for the physical 
address 
[10:9] Virtual index [13:12] 
[8:6] Reserved 
[5] Shareable 
[4] Outer allocation hint 
[3] L1 data cache valid 
[2:0] L2 State 
101 Modified 
001 Exclusive 
x11 Shared 
xx0 Invalid 
Data Register 1 [63:0] 0 
Data Register 2 [63:0] 0 














The following table shows the data that is returned from accessing the L2 tag RAM when L2 is 


configured with a 512KB cache size. 
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Table A6-27 L2 tag format with a 512KB L2 cache size 









































Register Bit field Description 
Data Register 0 [63:43] 0 
[42:36] ECC [6:0] if configured with ECC for a 
512KB L2 cache size, otherwise 0 
(35:12] Physical address [39:16] 
{11] Non-secure identifier for the physical 
address 
[10:9] Virtual index [13:12] 
[8:6] Reserved 
[5] Shareable 
[4] Outer allocation hint 
[3] L1 data cache valid 
[2:0] L2 State 
101 Modified 
001 Exclusive 
x11 Shared 
xx0 Invalid 
Data Register 1 [63:0] 0 
Data Register 2 [63:0] 0 

















The following table shows the data that is returned from accessing the L2 data RAM. 


Table A6-28 L2 data format 

















Register Bit field Description 
Data Register 0 [63:0] Data [63:0] 
Data Register 1 [63:0] Data [127:64] 
Data Register 2 [63:16] 0 
[15:8] ECC for Data [127:64] if configured with 
ECC 
[7:0] ECC for Data [63:0] if configured with 
ECC 




















The following table shows the data that is returned from accessing the L2 victim RAM. 


Table A6-29 L2 victim format 





























Register Bit field Description 
Data Register 0 [63:7] 0 
[6:0] PLRU [6:0] 
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Table A6-29 L2 victim format (continued) 

















Register Bit field Description 
Data Register 1 [63:0] 0 
Data Register 2 [63:0] 0 











A6.6.4 Encoding for the L2 TLB 


The following section describes the encoding for L2 TLB direct accesses. 


The following table shows the encoding that is required to select a given TLB entry. 


Table A6-30 L2 TLB encoding 


























Bit fields of Rd Description 

[31:24] RAMID = 0x18 

(23:21] Reserved 

[20:18] Way 
000 way) 
001 way 
010 way2 
011 way3 
100 way4 

[17:8] Reserved 

[7:0] Index 








The following table shows the data that is returned from accessing the L2 TLB. 
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Table A6-31 L2 TLB format 


























Register Bit field Description 
Instruction Register 0 [63:59] Reserved 

[58] Non-global 

[57] Outer-shared 

[56] Inner-shared 

[55] Reserved 

[54:52] Memory attributes: 


000 Device nGnRnE 

001 Device nGnRE 

010 Device nGRE 

011 Device GRE 

100 Non-cacheable 

101. Write-Back No-Allocate 
110 Write-Back Transient 


111 + Write-Back Read-Allocate and 
Write-Allocate 




















[51:48] Reserved 
[47:20] Physical address [39:12] 
[19:17] Page size: 
000 4KB 
001 16KB 
010 64KB 
011 256KB 
100 2MB 
101 32MB 
110 512MB 
111 1GB 
[16:7] Reserved 
[6] Indicates that the entry is coalesced and 
holds translations for four contiguous 
pages 
[5:2] This bit field contains the valid bits for 


four contiguous pages. If the entry is non- 
coalesced, then @b@Q@@1 indicates a valid 




















entry. 
[1:0] Reserved 
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Table A6-31 L2 TLB format (continued) 






































Register Bit field Description 
Instruction Register | [63:54] VMID [9:0] 
[53:38] ASID [15:0] 
[37] Walk cache entry 
[36] Prefetched translation 
[35:7] Virtual address [48:20] 
[6] Non-secure 
[5:0] Reserved 
Instruction Register 2 [63:8] Reserved 
[7:6] Translation regime: 
00 Secure EL1 
01 EL3 
10 Non-secure EL1 
11 EL2 
[5:0] VMID [15:10] 
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Chapter A7 
Level 2 memory system 


This chapter describes the L2 memory system. 


It contains the following sections: 


¢ A7.1 About the L2 memory system on page A7-98. 
¢ A7.2 About the L2 cache on page A7-99. 
¢ A7.3 Support for memory types on page A7-100. 
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A7.1 About the L2 memory system 
The L2 memory subsystem consists of: 


¢ An 8-way set associative L2 cache with a configurable size of 128K B, 256KB or 512KB. Cache lines 
have a fixed length of 64 bytes. 

¢ Optional ECC protection for all RAM structures except victim array. 

¢ Strictly inclusive with L1 data cache. Weakly inclusive with L1 instruction cache. 

¢ Configurable CHI interface to the DSU or CHI compliant system with support for 128-bit and 256-bit 
data widths. 

¢ Dynamic biased replacement policy. 

¢ Modified Exclusive Shared Invalid (MESJ) coherency. 
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A7.2 About the L2 cache 


The integrated L2 cache is the Point of Unification for the Cortex-A76 core. It handles both instruction 
and data requests from the instruction side and data side of each core respectively. 


When fetched from the system, instructions are allocated to the L2 cache and can be invalidated during 
maintenance operations. 


The L2 cache is invalidated automatically at reset unless the DISCACHEINVLD signal is set HIGH 
when the Cortex-A76 core is reset. This signal must be used only in diagnostic mode. If caches are not 
invalidated on reset, their functionality cannot be guaranteed. See the Arm® DynamIQ™ Shared Unit 
Technical Reference Manual for more information on the DISCACHEINVLD signal. 
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A7 Level 2 memory system 
A7.3 Support for memory types 


The Cortex-A76 core simplifies the coherency logic by downgrading some memory types. 


¢ Memory that is marked as both Inner Write-Back Cacheable and Outer Write-Back Cacheable is 
cached in the L1 data cache and the L2 cache. 

¢ Memory that is marked Inner Write-Through is downgraded to Non-cacheable. 

¢ Memory that is marked Outer Write-Through or Outer Non-cacheable is downgraded to Non- 
cacheable, even if the inner attributes are Write-Back cacheable. 


The following table shows the transaction capabilities of the Cortex-A76 core. It lists the maximum 
possible values for read, write, DVM issuing, and snoop capabilities of the private L2 cache. 


Table A7-1 Cortex-A76 Transaction Capabilities 





Attribute 


Value 


Description 





Write issuing capability 


22/34/46 


Maximum number of outstanding write 
transactions. Dependent on the configured 
TQ size. (24/36/48) 





Read issuing capability 


22/34/46 


Maximum number of outstanding read 
transactions. Dependent on the configured 
TQ size. (24/36/48) 





Snoop acceptance capability 


17/23/29 


Maximum number of outstanding snoops 
and stashes accepted. Dependent on the TQ 
size. (24/36/48) 





DVM issuing capability 





22/34/46 








Maximum number of outstanding DVMOp 
transactions. Dependent on the configured 
TQ size. (24/36/48) 
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Chapter A8& 
Reliability, Availability, and Serviceability (RAS) 


This chapter describes the RAS features implemented in the Cortex-A76 core. 


It contains the following sections: 

« A8.1 Cache ECC and parity on page A8-102. 

¢ A8.2 Cache protection behavior on page A8-103. 

¢ A8.3 Uncorrected errors and data poisoning on page A8-105. 
¢ A8.4 RAS error types on page A8-106. 

¢ A8.5 Error Synchronization Barrier on page A8-107. 

¢ A8.6 Error recording on page A8-108. 

¢ A&.7 Error injection on page A8-109. 
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A8 Reliability, Availability, and Serviceability (RAS) 
A8.1 Cache ECC and parity 


A8.1 Cache ECC and parity 


The Cortex-A76 core implements the RAS extension to the Armv8-A architecture which provides 
mechanisms for standardized reporting of the errors generated by cache protection mechanisms. 


When configured with core cache protection, the Cortex-A76 core can detect and correct a 1-bit error in 
any RAM and detect 2-bit errors in some RAMs. 





Note 


For information about SCU-L3 cache protection, see the Arm® DynamIQ™ Shared Unit Technical 
Reference Manual. 





The RAS extension improves the system by reducing unplanned outages: 


¢ Transient errors can be detected and corrected before they cause application or system failure. 
¢ Failing components can be identified and replaced. 
¢ Failure can be predicted ahead of time to allow replacement during planned maintenance. 


Errors that are present but not detected are known as latent or undetected errors. A transaction carrying a 
latent error is corrupted. In a system with no error detection, all errors are latent errors and are silently 
propagated by components until either: 


¢ They are masked and do not affect the outcome of the system. These are benign or false errors. 
¢ They affect the service interface of the system and cause failure. These are silent data corruptions. 


The severity of a failure can range from minor to catastrophic. In many systems, data or service loss is 
regarded as more of a minor failure than data corruption, as long as backup data is available. 


The RAS extension focuses on errors that are produced from hardware faults, which fall into two main 
categories: 

¢ Transient faults. 

¢ Persistent faults. 


The RAS extension describes data corruption faults, which mostly occur in memories and on data links. 
RAS concepts can also be used for the management of other types of physical faults found in systems, 
such as lock-step errors, thermal trip, and mechanical failure. The RAS extension provides a common 
programmers model and mechanisms for fault handling and error recovery. 
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A8.2 


A& Reliability, Availability, and Serviceability (RAS) 
A8.2 Cache protection behavior 


Cache protection behavior 


The configuration of the RAS extension that is implemented in the Cortex-A76 core includes cache 
protection. 


In this case, the Cortex-A76 core protects against errors that result in a RAM bitcell holding the incorrect 
value. 


The RAMs in the Cortex-A76 core have the following capability: 


SED 
Single Error Detect. One bit of parity is applicable to the entire word. The word size is specific 
for each RAM and depends on the protection granule. 


Interleaved parity 
One bit of parity is applicable to the even bits of the word, and one bit of parity is applicable to 
the odd bits of the word. 


SECDED 
Single Error Correct, Double Error Detect. 


Table A8-1 Cache protection behavior on page A8-103 indicates which protection type is applied to 
each RAM. 


The core can progress and remain functionally correct when there is a single bit error in any RAM. 


If there are multiple single bit errors in different RAMs, or within different protection granules within the 
same RAM, then the core also remains functionally correct. 


If there is a double bit error in a single RAM within the same protection granule, then the behavior 

depends on the RAM: 

¢ For RAMs with SECDED capability, the core detects and either reports or defers the error. If the error 
is ina cache line containing dirty data, then that data might be lost. 

¢ For RAMs with only SED, the core does not detect a double bit error. This might cause data 
corruption. 


If there are three or more bit errors within the same protection granule, then depending on the RAM and 
the position of the errors within the RAM, the core might or might not detect the errors. 


The cache protection feature of the core has a minimal performance impact when no errors are present. 


Table A8-1 Cache protection behavior 





RAM 


Protection type | Protection granule Correction behavior 





L1 instruction cache tag 1 parity bit 31 bits The line that contains the error is invalidated 


from the L1 instruction cache and fetched 
again from the subsequent memory system. 





L1 instruction cache data | SED 72 bits The line that contains the error is invalidated 


from the L1 instruction cache and fetched 
again from the subsequent memory system. 





L1 BTB 


None - a 





L1 GHB 


None - 5 





L1 BPIQ 


None - % 








L1 data cache tag 


SECDED 34 bits + 7 bits for ECC attached to | The cache line that contains the error gets 
the word. evicted, corrected in line, and refilled to the 
core. 
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A8 Reliability, Availability, and Serviceability (RAS) 
A8.2 Cache protection behavior 


Table A8-1 Cache protection behavior (continued) 





RAM 


Protection type 


Protection granule Correction behavior 



































L1 data cache data SECDED 32 bits of data +1 poison bit + 7 bits | The cache line that contains the error gets 
for ECC attached to the word. evicted, corrected in line, and refilled to the 
core. 
L1 Prefetch History Table | None - - 
(PHT) 
MMU translation cache 2 interleaved parity | 67 bits Entry invalidated, new pagewalk started to 
bits refetch it. 
MMU replacement policy | None - 
MMU biased replacement | None = 
L2 cache tag SECDED 128KB L2 - 7 ECC bits for 38 tag Tag is corrected inline. 
bits 
256KB L2 - 7 ECC bits for 37 tag 
bits 
512KB L2 - 7 ECC bits for 36 tag 
bits 
L2 cache data SECDED 8 ECC bits for 64 data bits Data is corrected inline. 
L2 victim None = - 
L2 TQ data SECDED 8 ECC bits for 64 data bits Data is corrected inline. 





To ensure that progress is guaranteed even in case of hard error, the core returns corrected data to the 
core, and no cache access is required after data correction. 
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A& Reliability, Availability, and Serviceability (RAS) 
A8.3 Uncorrected errors and data poisoning 


A8.3 Uncorrected errors and data poisoning 


When an error is detected, the correction mechanism is triggered. However, if the error is a 2-bit error in 
a RAM protected by ECC, then the error is not correctable. 


The behavior on an uncorrected error depends on the type of RAM. 


Uncorrected error detected in a data RAM 


When an uncorrected error is detected in a data RAM, the chunk of data with the error is marked as 
poisoned. This poison information is then transferred with the data and stored in the cache if the data is 
allocated into another cache. The poisoned information is stored per 64 bits of data, except in the L1 data 
cache where it is stored per 32 bits of data. 


Uncorrected error detected in a tag RAM 


When an uncorrected error is detected in a tag RAM, either the address or coherency state of the line is 
not known, and the corresponding data cannot be poisoned. In this case, the line is invalidated and an 
error recovery interrupt is generated to notify software that data has potentially been lost. 
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A8 Reliability, Availability, and Serviceability (RAS) 
A8.4 RAS error types 


A8.4 RAS error types 


This section describes the RAS error types that are introduced by the RAS extension and supported in the 
Cortex-A76 core. 


When a component accesses memory, an error might be detected in that memory and then be corrected, 
deferred, or detected but silently propagated. The following table lists the types of RAS errors that are 
supported in the Cortex-A76 core. 


Table A8-2 RAS error types supported in the Cortex-A76 core 





RAS error type | Definition 





Corrected A Corrected Error (CE) is reported for a single-bit ECC error on any protected RAM. 





Deferred A Deferred Error (DE) is reported for a double-bit ECC error that affects the data RAM on either the L1 data cache 
or the L2 cache. 





Uncorrected An Uncorrected Error (UE) is reported for a double-bit ECC error that affects the tag RAM of either the L1 data 
cache or the L2 cache. An Uncorrected Error is also reported for external aborts received in response to a store, 
data cache maintenance, instruction cache maintenance, TLBI maintenance, or cache copyback of dirty data. 
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A& Reliability, Availability, and Serviceability (RAS) 
A8.5 Error Synchronization Barrier 


A8.5 Error Synchronization Barrier 
The Error Synchronization Barrier (ESB) instruction synchronizes unrecoverable system errors. 
In the Cortex-A76 core, the ESB instruction allows efficient isolation of errors: 


¢ The ESB instruction does not wait for completion of accesses that cannot generate an asynchronous 
external abort. For example, if all external aborts are handled synchronously or it is known that no 
such accesses are outstanding. 

¢ The ESB instruction does not order accesses and does not guarantee a pipeline flush. 


All system errors must be synchronized by an ESB instruction, which guarantees the following: 


« All system errors that are generated before the ESB instruction have pended a System Error Interrupts 

(SEI) exception. 

¢ Ifa physical SEI is pended by or was pending before the ESB instruction executes, then: 

— It is taken before completion of the ESB instruction, if the physical SEI exception is unmasked at 
the current Exception level. 

— The pending SEI is cleared, the SEI status is recorded in DISR_EL1, and DISR_EL1.A is set to 1 
if the physical SEI exception is masked at the current Exception level. It indicates that the SEI 
exception was generated before the ESB instruction by instructions that occur in program order. 

¢ Ifa virtual SEI is pended by or was pending before the ESB instruction executes, then: 

— It is taken before completion of the ESB instruction, if the virtual SEI exception is unmasked. 

— The pending virtual SEI is cleared and the SEI status is recorded in VDISR_EL2 using the 
information provided by software in VSESR_EL2, if the virtual SEI exception is masked. 


After the ESB instruction, one of the following scenarios occurs: 


¢ SEIs pended by errors are taken and their status is recorded in ESR_ELn. 
¢ SEIs pended by errors are deferred and their status is recorded in DISR_EL1 or VDISR_EL2. 


This includes unrecoverable SEIs that are generated by instructions, translation table walks, and 
instruction fetches on the same core. 
Note 


DISR_ELI can only be accessed at EL1 and above. If EL2 is implemented and HCR_EL2.AMO is set to 
1, then reads and writes of DISR_EL1 at Non-secure EL1 access VDISR_EL2. 





See the following registers: 

¢ B2.36 DISR_EL1, Deferred Interrupt Status Register, EL1 on page B2-196. 

¢ B2.52 HCR_EL2, Hypervisor Configuration Register, EL2 on page B2-214. 

¢ B2.102 VDISR_EL2, Virtual Deferred Interrupt Status Register, EL2 on page B2-288. 
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A8.6 Error recording 


A8.6 Error recording 


The component that detects an error is called a node. The Cortex-A76 core is a node that interacts with 
the DynamIQ Shared Unit node. There is one record per node for the errors detected. 


For more information on error recording generated by cache protection, see the Arm® Reliability, 
Availability, and Serviceability (RAS) Specification, Armv8&, for the Armv8-A architecture profile. The 
following points apply specifically to the Cortex-A76 core: 


Error recording is only available when the core cache protection is implemented. 

In the Cortex-A76 core, any error that is detected is reported and recorded in the error record 

registers: 

— B2.38 ERRSELR_ELI, Error Record Select Register, EL1 on page B2-199 

— B2.39 ERXADDR_ELI, Selected Error Record Address Register, ELI on page B2-200 

— B2.40 ERXCTLR_ELI, Selected Error Record Control Register, ELI on page B2-201 

— B2.41 ERXFR_ELI, Selected Error Record Feature Register, ELI on page B2-202 

— B2.42 ERXMISCO_ELI, Selected Error Record Miscellaneous Register 0, ELI on page B2-203 

— B2.43 ERXMISC1_EL1, Selected Error Record Miscellaneous Register 1, ELI on page B2-204 

— B2.44 ERXPFGCDNR_ELI, Selected Error Pseudo Fault Generation Count Down Register, EL1 
on page B2-205 

— B2.45 ERXPFGCTLR_ELI, Selected Error Pseudo Fault Generation Control Register, EL1 
on page B2-206 

— B2.46 ERXPFGFR_ELI, Selected Pseudo Fault Generation Feature Register, EL1 
on page B2-208 

— B2.47 ERXSTATUS_EL1, Selected Error Record Primary Status Register, EL1 on page B2-209 

There are two error records provided, which can be selected with the ERRSELR_ELI register: 

— Record 0 is private to the core, and is updated on any error in the core RAMs including L1 
caches, TLB, and L2 cache. 

— Record 1 records any error in the L3 and snoop filter RAMs and is shared between all cores in the 
cluster. 

The fault handling interrupt is generated on the nRFAULTIRQ[0] pin for L3 and snoop filter errors, or 

on the nNFAULTIRQJn+1] pin for core n L1 and L2 errors. 
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A8.7 Error injection 


A8.7 Error injection 
To support testing of error handling software, the Cortex-A76 core can inject errors in the error detection 
logic. 
The following table describes all the possible types of error that the core can encounter and therefore 
inject. 


Table A8-3 Errors injected in the Cortex-A76 core 





Error type Description 





Corrected errors | A CE is generated for a single-bit ECC error on L1 data caches and L2 caches, both on data and tag RAMs. 





Deferred errors A DE is generated for a double-bit ECC error on L1 data caches and L2 caches, but only on data RAM. 














Uncorrected errors | A UE is generated for a double-bit ECC error on L1 data caches and L2 caches, but only on tag RAM. 





The following table describes the registers that handle error injection in the Cortex-A76 core. 


Table A8-4 Error injection registers 





Register name Description 





ERROPFGFR_EL1 The ERR Pseudo Fault Generation Feature register defines which errors can be injected. 





ERROPFGCTLR_EL1 | The ERR Pseudo Fault Generation Control register controls the errors that are injected. 








ERROPFGCDNR_EL! | The ERR Pseudo Fault Generation Count Down register controls the fault injection timing. 














Note 
This mechanism simulates the corruption of any RAM but the data is not actually corrupted. 





See also: 

¢ B3.9 ERROPFGFR, Error Pseudo Fault Generation Feature Register on page B3-307. 

¢ B3.8 ERROPFGCTLR, Error Pseudo Fault Generation Control Register on page B3-305. 

¢ B3.7 ERROPFGCDNR, Error Pseudo Fault Generation Count Down Register on page B3-304. 





100798 _0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights A8-109 
reserved. 
Non-Confidential 


A8 Reliability, Availability, and Serviceability (RAS) 
A8.7 Error injection 
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Chapter AQ 
Generic Interrupt Controller CPU interface 


This chapter describes the Cortex-A76 core implementation of the Arm Generic Interrupt Controller 
(GIC) CPU interface. 


It contains the following sections: 


¢ A9.1 About the Generic Interrupt Controller CPU interface on page A9-112. 
¢ A9.2 Bypassing the CPU interface on page A9-113. 
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A9 Generic Interrupt Controller CPU interface 
A9.1 About the Generic Interrupt Controller CPU interface 


AQ.1 About the Generic Interrupt Controller CPU interface 


The Cortex-A76 core implements the GIC CPU interface as described in the Arm Generic Interrupt 
Controller Architecture Specification. 


This interfaces with an external GICv3 or GICv4 distributor component within the cluster system and is 
a resource for supporting and managing interrupts. The GIC CPU interface hosts registers to mask, 
identify and control states of interrupts forwarded to that core. Each core in the cluster system has a GIC 
CPU interface component and connects to a common external distributor component. 


Note 


This chapter describes only features that are specific to the Cortex-A76 core implementation. Additional 
information specific to the cluster can be found in Arm® DynamIQ™ Shared Unit Technical Reference 
Manual. 








The GICv4 architecture supports: 


¢ Two security states. 

¢ Interrupt virtualization. 

¢ Software-generated Interrupts (SGIs). 

¢ Message Based Interrupts. 

¢ System register access for the CPU interface. 

¢ Interrupt masking and prioritization. 

¢ Cluster environments, including systems that contain more than eight cores. 
« Wake-up events in power management environments. 


The GIC includes interrupt grouping functionality that supports: 

¢ Configuring each interrupt to belong to an interrupt group. 

¢ Signaling Group | interrupts to the target core using either the IRQ or the FIQ exception request. 
Group | interrupts can be Secure or Non-secure. 

¢ Signaling Group 0 interrupts to the target core using the FIQ exception request only. 

¢ A unified scheme for handling the priority of Group 0 and Group | interrupts. 


This chapter describes only features that are specific to the Cortex-A76 core implementation. 


Related references 
Chapter B4 GIC registers on page B4-313 
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A9.2 Bypassing the CPU interface 


AQ9.2 Bypassing the CPU interface 
The GIC CPU Interface is always implemented within the Cortex-A76 core. 


However, you can disable it if you assert the GICCDISABLE signal HIGH at reset. If you disable the 
GIC CPU interface, the input pins nVIRQ and nVFIQ can be driven by an external GIC in the SoC. GIC 
system register access generates UNDEFINED instruction exceptions when the GICCDISABLE signal is 
HIGH. 


If the GIC is enabled, the input pins nVIRQ and nVFIQ must be tied off to HIGH. This is because the 
internal GIC CPU interface generates the virtual interrupt signals to the cores. The nIRQ and nFIQ 
signals are controlled by software, therefore there is no requirement to tie them HIGH. 
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A9.2 Bypassing the CPU interface 
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Chapter A10 
Advanced SIMD and floating-point support 


This chapter describes the Advanced SIMD and floating-point features and registers in the Cortex-A76 
core. The unit in charge of handling the Advanced SIMD and floating-point features is also referred to as 
data engine in this manual. 


It contains the following sections: 


¢ A10.1 About the Advanced SIMD and floating-point support on page A10-116. 
¢ A10.2 Accessing the feature identification registers on page A10-117. 
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A10 Advanced SIMD and floating-point support 
A10.1 About the Advanced SIMD and floating-point support 


A10.1 About the Advanced SIMD and floating-point support 


The Cortex-A76 core supports the Advanced SIMD and scalar floating-point instructions in the A64 
instruction set and the Advanced SIMD and floating-point instructions in the A32 and T32 instruction 
sets. 


The Cortex-A76 floating-point implementation: 

¢ Does not generate floating-point exceptions. 

¢ Implements all scalar operations in hardware with support for all combinations of: 
— Rounding modes. 
— Flush-to-zero. 
— Default Not a Number (NaN) modes. 


The Armv8-A architecture does not define a separate version number for its Advanced SIMD and 
floating-point support in the AArch64 execution state because the instructions are always implicitly 
present. 
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A10.2 Accessing the feature identification registers 


A10.2 Accessing the feature identification registers 


Software can identify the Advanced SIMD and floating-point features using the feature identification 
registers in the AArch64 Execution state only. 


The Cortex-A76 core only supports AArch32 in ELO, therefore none of the feature identification 
registers are accessible in the AArch32 Execution state. 


You can access the feature identification registers in the AArch64 Execution state using the MRS 


instruction, for example: 
MRS <Xt>, ID_AA64PFR@_EL1 ; Read ID_AA64PFR@_EL1 into Xt 
MRS <Xt>, MVFR@_EL1 Read MVFR@_EL1 into Xt 


3 

3 
MRS <Xt>, MVFR1_EL1 3 Read MVFR1_EL1 into Xt 
MRS <Xt>, MVFR2_EL1 3 Read MVFR2_EL1 into Xt 


Table A10-1 AArch64 Advanced SIMD and scalar floating-point feature identification registers 





Register name Description 





ID_AA64PFRO_EL1 | See B2.62 ID_AA64PFRO_EL1, AArch64 Processor Feature Register 0, ELI on page B2-229. 




















MVFRO EL1 See B5.4 MVFRO_EL1, Media and VFP Feature Register 0, ELI on page B5-353. 
MVFRI1 EL1 See B5.5 MVFR1_ELI, Media and VFP Feature Register 1, ELI on page B5-355. 
MVFR2 ELI] See B5.6 MVFR2_EL1, Media and VFP Feature Register 2, ELI on page B5-357. 
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Part B 


Register descriptions 


Chapter B1 
AArch32 system registers 


This chapter describes the system registers in the AArch32 state. 


It contains the following section: 
¢ B11 AArch32 architectural system register summary on page B1-122. 
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B1 AArch32 system registers 
B1.1 AArch32 architectural system register summary 


B1.1 AArch32 architectural system register summary 


This chapter identifies the AArch32 architectural system registers implemented in the Cortex-A76 core. 


The following table identifies the architecturally defined registers that are implemented in the 
Cortex-A76 core. For a description of these registers see the Arm® Architecture Reference Manual 
Armvé8, for Armv8-A architecture profile. 


For the registers listed in the following table, coproc==0b1111. 


Table B1-1 Architecturally defined registers 



















































































Name CRn | Opc1 | CRm | Opc2 | Width | description 
CNTFRQ cl4 |0 c0 0 32 Timer Clock Ticks per Second 
CNTP_CTL |cl4 |0 c2 1 32 Counter-timer Physical Timer Control register 
CNTP_CVAL | - 2 cl4_ |- 64 Counter-timer Physical Timer CompareValue register 
CNTP_TVAL |cl4 |0 c2 0 32 Counter-timer Physical Timer TimerValue register 
CNTPCT - 0 cl4_ |- 64 Counter-timer Physical Count register 
CNTV_CTL |cl4 |0 c3 1 32 Counter-timer Virtual Timer Control register 
CNTV_CVAL | - 3 cl4_ |- 64 Counter-timer Virtual Timer Compare Value register 
CNTV_TVAL |cl4 |0 c3 0 32 Counter-timer Virtual Timer TimerValue register 
CNTVCT - 1 cl4_ |- 64 Counter-timer Virtual Count register 
CP1S5ISB c7 0 c5 4 32 Instruction Synchronization Barrier System instruction 
CP15DSB c7 0 clO |4 32 Data Synchronization Barrier System instruction 
CP15DMB c7 0 clO {5 32 Data Memory Barrier System instruction 
DLR c4 3 c5 1 32 Debug Link Register 
DSPSR c4 3 c5 0 32 Debug Saved Program Status Register 
TPIDRURO |cl3 |0 c0 3 32 User Read Only Thread ID Register 
TPIDRURW |cl3 |0 c0 2 32 User Read/Write Thread ID Register 
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Chapter B2 
AArch64 system registers 


This chapter describes the system registers in the AArch64 state. 


It contains the following sections: 

¢ B2.1 AArch64 registers on page B2-126. 

¢ B2.2 AArch64 architectural system register summary on page B2-127. 

¢ B2.3 AArch64 implementation defined register summary on page B2-134. 

¢ B2.4 AArch64 registers by functional group on page B2-136. 

¢ B2.5 ACTLR_ELI, Auxiliary Control Register, ELI on page B2-144. 

¢ B2.6 ACTLR_EL2, Auxiliary Control Register, EL2 on page B2-145. 

¢ B2.7 ACTLR_EL3, Auxiliary Control Register, EL3 on page B2-147. 

¢ B2.8 AFSRO_EL1, Auxiliary Fault Status Register 0, EL1 on page B2-149. 

¢ B2.9 AFSRO_EL2, Auxiliary Fault Status Register 0, EL2 on page B2-150. 

¢ B2.10 AFSRO_EL3, Auxiliary Fault Status Register 0, EL3 on page B2-151. 

¢ B2.11 AFSRI_ELI, Auxiliary Fault Status Register 1, ELI on page B2-152. 

¢ B2.12 AFSR1_EL2, Auxiliary Fault Status Register 1, EL2 on page B2-153. 

¢ B2.13 AFSRI_EL3, Auxiliary Fault Status Register 1, EL3 on page B2-154. 

¢ B2.14 AIDR_ELI, Auxiliary ID Register, EL1 on page B2-155. 

¢ B2.15 AMAIR_ELI, Auxiliary Memory Attribute Indirection Register, EL1 on page B2-156. 
¢ B2.16 AMAIR_EL2, Auxiliary Memory Attribute Indirection Register, EL2 on page B2-157. 
¢ B2.17 AMAIR_EL3, Auxiliary Memory Attribute Indirection Register, EL3 on page B2-158. 
¢ B2.18 CCSIDR_ELI1, Cache Size ID Register, ELI on page B2-159. 

¢ B2.19 CLIDR_ELI, Cache Level ID Register, ELI on page B2-161. 

¢ B2.20 CPACR_ELI, Architectural Feature Access Control Register, EL1 on page B2-163. 

* B2.21 CPTR_EL2, Architectural Feature Trap Register, EL2 on page B2-164. 

¢ B2.22 CPTR_EL3, Architectural Feature Trap Register, EL3 on page B2-165. 

¢ B2.23 CPUACTLR_EL1I, CPU Auxiliary Control Register, ELI on page B2-166. 
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B2.24 CPUACTLR2_ ELI, CPU Auxiliary Control Register 2, ELI on page B2-168. 

B2.25 CPUACTLR3_EL1, CPU Auxiliary Control Register 3, ELI on page B2-170. 

B2.26 CPUCFR_EL1, CPU Configuration Register, ELI on page B2-172. 

B2.27 CPUECTLR_EL1, CPU Extended Control Register, EL1 on page B2-174. 

B2.28 CPUPCR_EL3, CPU Private Control Register, EL3 on page B2-182. 

B2.29 CPUPMR_EL3, CPU Private Mask Register, EL3 on page B2-184. 

B2.30 CPUPOR_EL3, CPU Private Operation Register, EL3 on page B2-186. 

B2.31 CPUPSELR_EL3, CPU Private Selection Register, EL3 on page B2-188. 

B2.32 CPUPWRCTLR_EL1, Power Control Register, EL1 on page B2-190. 

B2.33 CSSELR_EL1, Cache Size Selection Register, ELI on page B2-192. 

B2.34 CTR_ELO, Cache Type Register, ELO on page B2-193. 

B2.35 DCZID_ELO, Data Cache Zero ID Register, ELO on page B2-195. 

B2.36 DISR_ELI, Deferred Interrupt Status Register, EL] on page B2-196. 

B2.37 ERRIDR_ELI, Error ID Register, EL1 on page B2-198. 

B2.38 ERRSELR_ELI, Error Record Select Register, EL1 on page B2-199. 

B2.39 ERXADDR_ELI, Selected Error Record Address Register, EL1 on page B2-200. 

B2.40 ERXCTLR_EL1, Selected Error Record Control Register, ELI on page B2-201. 

B2.41 ERXFR_EL1, Selected Error Record Feature Register, ELI on page B2-202. 

B2.42 ERXMISCO_ELI, Selected Error Record Miscellaneous Register 0, ELI on page B2-203. 
B2.43 ERXMISC1_ELI, Selected Error Record Miscellaneous Register 1, ELI on page B2-204. 
B2.44 ERXPFGCDNR_EL1I, Selected Error Pseudo Fault Generation Count Down Register, EL1 
on page B2-205. 

B2.45 ERXPFGCTLR_ELI, Selected Error Pseudo Fault Generation Control Register, EL1 

on page B2-206. 

B2.46 ERXPFGFR_EL1, Selected Pseudo Fault Generation Feature Register, EL1 on page B2-208. 
B2.47 ERXSTATUS_EL1, Selected Error Record Primary Status Register, EL1 on page B2-209. 
B2.48 ESR_EL1, Exception Syndrome Register, ELI on page B2-210. 

B2.49 ESR_EL2, Exception Syndrome Register, EL2 on page B2-211. 

B2.50 ESR_EL3, Exception Syndrome Register, EL3 on page B2-212. 

B2.51 HACR_EL2, Hyp Auxiliary Configuration Register, EL2 on page B2-213. 

B2.52 HCR_EL2, Hypervisor Configuration Register, EL2 on page B2-214. 

B2.53 ID_AA64AFRO_ELI, AArch64 Auxiliary Feature Register 0 on page B2-216. 
B2.54ID_AA64AFRI_ELI, AArch64 Auxiliary Feature Register 1 on page B2-217. 

B2.55 ID_AA64DFRO_EL1, AArch64 Debug Feature Register 0, ELI on page B2-218. 

B2.56 ID _AA64DFRI1_EL1, AArch64 Debug Feature Register 1, ELI on page B2-220. 

B2.57 ID_AA64ISARO_EL1, AArch64 Instruction Set Attribute Register 0, EL] on page B2-221. 
B2.58 ID_AA64ISARI_EL1, AArch64 Instruction Set Attribute Register 1, EL] on page B2-223. 
B2.59 ID_AA64MMFRO_EL1, AArch64 Memory Model Feature Register 0, ELI on page B2-224. 
B2.60 ID_AA64MMFRI1_ ELI, AArch64 Memory Model Feature Register 1, ELI on page B2-226. 
B2.61 ID_AA64MMFR2_ ELI, AArch64 Memory Model Feature Register 2, ELI on page B2-228. 
B2.62 ID_AA64PFRO_EL1, AArch64 Processor Feature Register 0, ELI on page B2-229. 
B2.63 ID_AA64PFRI_EL1, AArch64 Processor Feature Register 1, ELI on page B2-231. 
B2.64 ID_AFRO_EL1, AArch32 Auxiliary Feature Register 0, ELI on page B2-232. 

B2.65 ID_DFRO_EL1, AArch32 Debug Feature Register 0, ELI on page B2-233. 

B2.66 ID_ISARO_EL1, AArch32 Instruction Set Attribute Register 0, ELI on page B2-235. 
B2.67 ID_ISAR1_EL1, AArch32 Instruction Set Attribute Register 1, ELI on page B2-237. 
B2.68 ID_ISAR2_EL1, AArch32 Instruction Set Attribute Register 2, ELI on page B2-239. 
B2.69 ID_ISAR3_EL1, AArch32 Instruction Set Attribute Register 3, ELI on page B2-241. 
B2.70 ID_ISAR4_EL1, AArch32 Instruction Set Attribute Register 4, ELI on page B2-243. 
B2.71 ID_ISAR5S_EL1, AArch32 Instruction Set Attribute Register 5, ELI on page B2-245. 
B2.72 ID_ISAR6_EL1, AArch32 Instruction Set Attribute Register 6, ELI on page B2-247. 
B2.73 ID_MMFRO_EL1, AArch32 Memory Model Feature Register 0, ELI on page B2-248. 
B2.74 ID_MMFR1_EL1, AArch32 Memory Model Feature Register 1, ELI on page B2-250. 
B2.75 ID_MMFR2_EL1, AArch32 Memory Model Feature Register 2, ELI on page B2-252. 
B2.76 ID_MMFR3_EL1, AArch32 Memory Model Feature Register 3, ELI on page B2-254. 
B2.77 ID_MMFR4_EL1, AArch32 Memory Model Feature Register 4, ELI on page B2-256. 
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B2.78 ID_PFRO_EL1, AArch32 Processor Feature Register 0, ELI on page B2-258. 
B2.79 ID_PFRI_EL1, AArch32 Processor Feature Register 1, ELI on page B2-260. 
B2.80 ID_PFR2_EL1, AArch32 Processor Feature Register 2, ELI on page B2-262. 
B2.81 LORC_EL1, LORegion Control Register, ELI on page B2-263. 

B2.82 LORID_EL1, LORegion ID Register, EL1 on page B2-264. 

B2.83 LORN_EL1, LORegion Number Register, EL1 on page B2-265. 

B2.84 MDCR_EL3, Monitor Debug Configuration Register, EL3 on page B2-266. 
B2.85 MIDR_ELI, Main ID Register, EL1 on page B2-268. 

B2.86 MPIDR_EL1, Multiprocessor Affinity Register, ELI] on page B2-269. 

B2.87 PAR_EL1, Physical Address Register, ELI on page B2-271. 

B2.88 REVIDR_ELI, Revision ID Register, ELI on page B2-272. 

B2.89 RMR_EL3, Reset Management Register on page B2-273. 

B2.90 RVBAR_EL3, Reset Vector Base Address Register, EL3 on page B2-274. 
B2.91 SCTLR_EL1, System Control Register, ELI on page B2-275. 

B2.92 SCTLR_EL2, System Control Register, EL2 on page B2-277. 

B2.93 SCTLR_EL3, System Control Register, EL3 on page B2-278. 

B2.94 TCR_ELI1, Translation Control Register, EL1 on page B2-280. 

B2.95 TCR_EL2, Translation Control Register, EL2 on page B2-281. 

B2.96 TCR_EL3, Translation Control Register, EL3 on page B2-282. 

B2.97 TTBRO_EL1, Translation Table Base Register 0, ELI on page B2-283. 

B2.98 TTBRO_EL2, Translation Table Base Register 0, EL2 on page B2-284. 

B2.99 TTBRO_EL3, Translation Table Base Register 0, EL3 on page B2-285. 
B2.100 TTBRI_EL1, Translation Table Base Register 1, ELI on page B2-286. 
B2.101 TTBRI_EL2, Translation Table Base Register 1, EL2 on page B2-287. 
B2.102 VDISR_EL2, Virtual Deferred Interrupt Status Register, EL2 on page B2-288. 
B2.103 VSESR_EL2, Virtual SError Exception Syndrome Register on page B2-289. 
B2.104 VTCR_EL2, Virtualization Translation Control Register, EL2 on page B2-290. 


B2.105 VITBR_EL2, Virtualization Translation Table Base Register, EL2 on page B2-291. 
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B2.1 AArch64 registers 


AArch64 registers 


This chapter provides information about the AArch64 system registers with IMPLEMENTATION DEFINED bit 
fields and IMPLEMENTATION DEFINED registers associated with the core. 


The chapter provides IMPLEMENTATION SPECIFIC information, for a complete description of the registers, see 
the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The chapter is presented as follows: 
AArch64 architectural system register summary 


This section identifies the AArch64 architectural system registers implemented in the 
Cortex-A76 core that have IMPLEMENTATION DEFINED bit fields. The register descriptions for these 
registers only contain information about the IMPLEMENTATION DEFINED bits. 


AArch64 IMPLEMENTATION DEFINED register summary 


This section identifies the AArch64 architectural registers implemented in the Cortex-A76 core 
that are IMPLEMENTATION DEFINED. 


AArch64 registers by functional group 


This section groups the IMPLEMENTATION DEFINED registers and architectural system registers with 
IMPLEMENTATION DEFINED bit fields, as identified previously, by function. It also provides reset 
details for key register types. 


Register descriptions 


The remainder of the chapter provides register descriptions of the IMPLEMENTATION DEFINED 
registers and architectural system registers with IMPLEMENTATION DEFINED bit fields, as identified 
previously. These are listed in alphabetic order. 
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B2.2 AArch64 architectural system register summary 















































B2.2 AArch64 architectural system register summary 
This section describes the AArch64 architectural system registers implemented in the Cortex-A76 core. 
The section contains two tables: 
Registers with implementation defined bit fields 
This table identifies the architecturally defined registers in Cortex-A76 that have 
implementation defined bit fields. The register descriptions for these registers only contain 
information about the implementation defined bits. 
See Zable B2-1 Registers with implementation defined bit fields on page B2-127. 
Other architecturally defined registers 
This table identifies the other architecturally defined registers that are implemented in the 
Cortex-A76 core. These registers are described in the Arm® Architecture Reference Manual 
Armvé, for Armv8-A architecture profile. 
See Other architecturally defined registers on page B2-131. 
Table B2-1 Registers with implementation defined bit fields 
Name Op0 | CRn | Op1 | CRm | Op2 | Width | Description 
ACTLR ELI 3 cl 0 c0 1 64 B2.5 ACTLR_ELI, Auxiliary Control Register, EL1 
on page B2-144 
ACTLR_EL2 3 cl 4 c0 1 64 B2.6 ACTLR_EL2, Auxiliary Control Register, EL2 
on page B2-145 
ACTLR_EL3 3 cl 6 c0 1 64 B2.7 ACTLR_EL3, Auxiliary Control Register, EL3 
on page B2-147 
AIDR_EL1 3 c0 1 c0 7 32 B2.14 AIDR_ELI, Auxiliary ID Register, ELI on page B2-155 
AFSRO_EL1 3 c5 0 cl 0 32 B2.8 AFSRO_EL1, Auxiliary Fault Status Register 0, EL1 
on page B2-149 
AFSRO_EL2 3 c5 4 cl 0 32 B2.9 AFSRO_EL2, Auxiliary Fault Status Register 0, EL2 
on page B2-150 
AFSRO_EL3 3 c5 6 cl 0 32 B2.10 AFSRO_EL3, Auxiliary Fault Status Register 0, EL3 
on page B2-151 
AFSR1_EL1 3 c5 0 cl 1 32 B2.11 AFSR1_EL1, Auxiliary Fault Status Register 1, EL1 
on page B2-152 
AFSR1_EL2 3 c5 4 cl 1 32 B2.12 AFSR1_EL2, Auxiliary Fault Status Register 1, EL2 
on page B2-153 
AFSR1_EL3 3 c5 6 cl 1 32 B2.13 AFSR1_EL3, Auxiliary Fault Status Register 1, EL3 
on page B2-154 
AMAIR EL1 3 cl0 |0 c3 0 64 B2.15 AMAIR_EL1, Auxiliary Memory Attribute Indirection 
Register, ELI on page B2-156 
AMAIR EL2 3 clO |4 c3 0 64 B2.16 AMAIR_EL2, Auxiliary Memory Attribute Indirection 
Register, EL2 on page B2-157 
AMAIR EL3 3 clO |6 c3 0 64 B2.17 AMAIR_EL3, Auxiliary Memory Attribute Indirection 
Register, EL3 on page B2-158 
CCSIDR_EL1 3 c0 1 c0 0 32 B2.18 CCSIDR_ELI, Cache Size ID Register, EL1 
on page B2-159 
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B2.2 AArch64 architectural system register summary 


Table B2-1 Registers with implementation defined bit fields (continued) 







































































Name Op0 | CRn | Op1 | CRm | Op2 | Width | Description 

CLIDR_EL1 3 c0 1 c0 1 64 B2.19 CLIDR_EL1, Cache Level ID Register, EL1 
on page B2-161 

CPACR_EL1 3 cl 0 c0 2 32 B2.20 CPACR_EL1, Architectural Feature Access Control 
Register, ELI on page B2-163 

CPTR_EL2 3 cl 4 cl 2 32 B2.21 CPTR_EL2, Architectural Feature Trap Register, EL2 
on page B2-164 

CPTR_EL3 3 cl 6 cl 2 32 B2.22 CPTR_EL3, Architectural Feature Trap Register, EL3 
on page B2-165 

CSSELR_EL1 3 c0 2 c0 0 32 B2.33 CSSELR_EL1, Cache Size Selection Register, EL1 
on page B2-192 

CTR_ELO 3 c0 3 c0 1 32 B2.34 CTR_ELO, Cache Type Register, ELO on page B2-193 

DISR_EL1 3 cl2 |0 cl 1 64 B2.36 DISR_EL1, Deferred Interrupt Status Register, EL1 
on page B2-196 

ERRIDR_EL1 3 c5 0 c3 0 32 B2.37 ERRIDR_ELI, Error ID Register, ELI on page B2-198 

ERRSELR_ EL1 3 c5 0 c3 1 32 B2.38 ERRSELR_ELI, Error Record Select Register, EL1 
on page B2-199 

ERXADDR EL] 3 c5 0 c4 3 64 B2.39 ERXADDR_ELI, Selected Error Record Address Register, 
ELI on page B2-200 

ERXCTLR_EL1 3 c5 0 c4 1 64 B2.40 ERXCTLR_EL1, Selected Error Record Control Register, 
ELI on page B2-201 

ERXFR_ EL1 3 c5 0 c4 0 64 B2.41 ERXFR_ELI, Selected Error Record Feature Register, EL1 
on page B2-202 

ERXMISCO_EL1 3 c5 0 c5 0 64 B2.42 ERXMISCO_ELI, Selected Error Record Miscellaneous 
Register 0, ELI on page B2-203 

ERXMISC1_EL1 3 c5 0 c5 1 64 B2.43 ERXMISC1_EL1, Selected Error Record Miscellaneous 
Register 1, ELI on page B2-204 

ERXSTATUS _EL1 3 c5 0 c4 2 32 B2.47 ERXSTATUS_EL1, Selected Error Record Primary Status 
Register, ELI on page B2-209 

ESR_EL1 3 c5 0 c2 0 32 B2.48 ESR_EL1, Exception Syndrome Register, EL1 
on page B2-210 

ESR _EL2 3 c5 4 c2 0 32 B2.49 ESR_EL2, Exception Syndrome Register, EL2 
on page B2-211 

ESR_EL3 3 c5 6 c2 0 32 B2.50 ESR_EL3, Exception Syndrome Register, EL3 
on page B2-212 

HACR_EL2 3 cl 4 cl 7 32 B2.51 HACR_EL2, Hyp Auxiliary Configuration Register, EL2 
on page B2-213 

HCR_EL2 3 cl 4 cl 0 64 B2.52 HCR_EL2, Hypervisor Configuration Register, EL2 
on page B2-214 

ID_AFRO EL1 3 c0 0 cl 3 32 B2.64 ID_AFRO_EL1, AArch32 Auxiliary Feature Register 0, 
ELI on page B2-232 
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B2.2 AArch64 architectural system register summary 


Table B2-1 Registers with implementation defined bit fields (continued) 













































































Name Op0 | CRn | Op1 | CRm | Op2 | Width | Description 

ID_DFRO EL1 3 c0 0 cl 2 32 B2.65 ID_DFRO_EL1, AArch32 Debug Feature Register 0, EL1 
on page B2-233 

ID_ISARO_EL1 3 c0 0 c2 0 32 B2.66 ID_ISARO_EL1, AArch32 Instruction Set Attribute 
Register 0, ELI on page B2-235 

ID_ISAR1 EL] 3 c0 0 c2 1 32 B2.67 ID ISAR1_EL1, AArch32 Instruction Set Attribute 
Register 1, ELI on page B2-237 

ID_ISAR2 EL] 3 c0 0 c2 2 32 B2.68 ID_ISAR2_EL1, AArch32 Instruction Set Attribute 
Register 2, ELI on page B2-239 

ID_ISAR3_ EL1 3 c0 0 c2 3 32 B2.69 ID_ISAR3_EL1, AArch32 Instruction Set Attribute 
Register 3, ELI on page B2-241 

ID_ISAR4 EL] 3 c0 0 c2 4 32 B2.70 ID_ISAR4_EL1, AArch32 Instruction Set Attribute 
Register 4, ELI on page B2-243 

ID_ISARS_EL1 3 c0 0 c2 5 32 B2.71 ID_ISAR5_EL1, AArch32 Instruction Set Attribute 
Register 5, ELI on page B2-245 

ID_ISAR6_EL1 3 c0 0 c2 7 32 B2.72 ID_ISAR6_EL1, AArch32 Instruction Set Attribute 
Register 6, ELI on page B2-247 

ID_MMFRO EL1 3 c0 0 cl 4 32 B2.73 ID_MMFRO_EL1, AArch32 Memory Model Feature 
Register 0, ELI on page B2-248 

ID_MMEFRI1 EL1 3 c0 0 cl 5 32 B2.74 ID_MMFRI_ELI1, AArch32 Memory Model Feature 
Register 1, ELI on page B2-250 

ID_MMFR2 EL1 3 c0 0 cl 6 32 B2.75 ID_MMFR2_EL1, AArch32 Memory Model Feature 
Register 2, ELI on page B2-252 

ID_MMFR3_ EL1 3 c0 0 cl 7 32 B2.76 ID_MMFR3_EL1, AArch32 Memory Model Feature 
Register 3, ELI on page B2-254 

ID_MMFR4 EL1 3 c0 0 c2 6 32 B2.77 ID_MMFR4_EL1, AArch32 Memory Model Feature 
Register 4, ELI on page B2-256 

ID_PFRO EL1 3 c0 0 cl 0 32 B2.78 ID_PFRO_EL1, AArch32 Processor Feature Register 0, 
ELI on page B2-258 

ID_PFR1 EL1 3 c0 0 cl 1 32 B2.79 ID_PFRI_EL1, AArch32 Processor Feature Register 1, 
ELI on page B2-260 

ID_PFR2 EL1 3 c0 0 c3 4 32 B2.80 ID_PFR2_EL1, AArch32 Processor Feature Register 2, 
ELI on page B2-262 

ID_AA64DFRO EL1 3 c0 0 c5 0 64 B2.55 ID_AA64DFRO_EL1, AArch64 Debug Feature Register 0, 
ELI on page B2-218 

ID_AA64ISARO ELI |3 c0 0 c6 0 64 B2.57 ID_AA64ISARO_EL1, AArch64 Instruction Set Attribute 
Register 0, ELI on page B2-221 

ID_AAO4ISARI] ELI] |3 c0 0 c6 1 64 B2.58 ID_AA64ISARI_EL1, AArch64 Instruction Set Attribute 
Register 1, ELI on page B2-223 

ID_AA64MMEFRO ELI | 3 c0 0 c7 0 64 B2.59 ID_AA64MMFRO_EL1, AArch64 Memory Model Feature 
Register 0, ELI on page B2-224 

ID_AA64MMEFRI1 ELI | 3 c0 0 c7 1 64 B2.60 ID_AA64MMFRI1_EL1, AArch64 Memory Model Feature 
Register 1, ELI on page B2-226 
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B2 AArch64 system registers 
B2.2 AArch64 architectural system register summary 


Table B2-1 Registers with implementation defined bit fields (continued) 













































































Name Op0 | CRn | Op1 | CRm | Op2 | Width | Description 
ID_AA64MMFR2 EL] |3 c0 0 c7 2 64 B2.61 ID_AA64MMFR2_EL1, AArch64 Memory Model Feature 
Register 2, ELI on page B2-228 
ID_AA64PFRO EL] 3 c0 0 c4 0 64 B2.62 ID_AA64PFRO_EL1, AArch64 Processor Feature Register 
0, ELI on page B2-229 
IFSR32_EL2 3 c5 4 c0 1 32 
LORC _EL1 3 cld |0 c4 3 64 B2.81 LORC_EL1, LORegion Control Register, EL1 
on page B2-263 
LORID_EL1 3 cld0 |0 c4 7 64 B2.82 LORID_EL1, LORegion ID Register, ELI on page B2-264 
LORN_EL1 3 cl0 |0 c4 2 64 B2.83 LORN_EL1, LORegion Number Register, EL1 
on page B2-265 
MDCR_EL3 3 cl 6 c3 1 32 B2.84 MDCR_EL3, Monitor Debug Configuration Register, EL3 
on page B2-266 
MIDR EL1 3 c0 0 c0 0 32 B2.85 MIDR_ELI, Main ID Register, ELI on page B2-268 
MPIDR_ EL1 3 c0 0 c0 5 64 B2.86 MPIDR_EL1, Multiprocessor Affinity Register, EL1 
on page B2-269 
PAR EL1 3 c7 0 c4 0 64 B2.87 PAR_ELI, Physical Address Register, EL] on page B2-271 
RVBAR_EL3 3 cl2 |6 c0 1 64 B2.90 RVBAR_EL3, Reset Vector Base Address Register, EL3 
on page B2-274 
REVIDR_ ELI 3 c0 0 c0 6 32 B2.88 REVIDR_ELI, Revision ID Register, EL1 on page B2-272 
SCTLR_EL1 3 cl 0 c0 0 32 B2.91 SCTLR_EL1, System Control Register, EL1 
on page B2-275 
SCTLR_EL2 3 cl 4 c0 0 32 B2.92 SCTLR_EL2, System Control Register, EL2 
on page B2-277 
SCTLR_EL12 3 cl > c0 0 32 B2.91 SCTLR_EL1, System Control Register, EL1 
on page B2-275 
SCTLR_EL3 3 cl 6 c0 0 32 B2.93 SCTLR_EL3, System Control Register, EL3 
on page B2-278 
TCR_EL1 3 c2 0 c0 2 64 B2.94 TCR_ELI, Translation Control Register, EL1 
on page B2-280 
TCR_EL2 3 c2 4 c0 2 64 B2.95 TCR_EL2, Translation Control Register, EL2 
on page B2-281 
TCR_EL3 3 c2 6 c0 2 64 B2.96 TCR_EL3, Translation Control Register, EL3 
on page B2-282 
TTBRO_EL1 3 c2 0 c0 0 64 B2.97 TTBRO_ELI, Translation Table Base Register 0, ELI 
on page B2-283 
TTBRO_EL2 3 c2 4 c0 0 64 B2.98 TTBRO_EL2, Translation Table Base Register 0, EL2 
on page B2-284 
TTBRO_EL3 3 c2 6 c0 0 64 B2.99 TTBRO_EL3, Translation Table Base Register 0, EL3 
on page B2-285 
TTBR1_EL1 3 c2 0 c0 1 64 B2.100 TTBR1_EL1, Translation Table Base Register 1, EL1 
on page B2-286 
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B2.2 AArch64 architectural system register summary 


Table B2-1 Registers with implementation defined bit fields (continued) 






























































































































































Name Op0 | CRn | Op1 | CRm | Op2 | Width | Description 
TTBR1_EL2 3 c2 4 c0 1 64 B2.101 TTBR1_EL2, Translation Table Base Register 1, EL2 
on page B2-287 
VDISR_EL2 3 cl2 |4 cl 1 64 B2.102 VDISR_EL2, Virtual Deferred Interrupt Status Register, 
EL2 on page B2-288 
VSESR_EL2 3 c5 4 c2 3 64 B2.103 VSESR_EL2, Virtual SError Exception Syndrome 
Register on page B2-289 
VTCR_EL2 3 c2 4 cl 2 32 B2.104 VTCR_EL2, Virtualization Translation Control Register, 
EL2 on page B2-290 
VTTBR_EL2 3 c2 4 cl 0 64 B2.105 VTTBR_EL2?, Virtualization Translation Table Base 
Register, EL2 on page B2-291 
Table B2-2 Other architecturally defined registers 
Name OpO {|CRn |Op1 |CRm |Op2_ | Widt| Description 
h 
AFSRO_EL12 3 c5 5 1 0 32 Auxiliary Fault Status Register 0 
AFSR1_EL12 3 c5 > 1 1 32 Auxiliary Fault Status Register 1 
AMAIR EL12 3 cl0 5 c3 0 64 Auxiliary Memory Attribute Indirection Register 
CNTFRQ_ ELO 3 cl4 3 0 0 32 Counter-timer Frequency register 
CNTHCTL_EL2 3 cl4 4 cl 0 32 Counter-timer Hypervisor Control register 
CNTHP_ CTL_EL2 3 cl4 4 c2 1 32 Counter-timer Hypervisor Physical Timer Control 
register 
CNTHP_CVAL EL2 3 cl4 4 c2 2 64 Counter-timer Hyp Physical Compare Value register 
CNTHP_TVAL EL2 3 cl4 4 c2 0 32 Counter-timer Hyp Physical Timer TimerValue register 
CNTHV_CTL_EL2 3 cl4 4 c3 1 32 Counter-timer Virtual Timer Control register 
CNTHV_CVAL EL2 3 cl4 4 c3 2 64 Counter-timer Virtual Timer Compare Value register 
CNTHV_TVAL_EL2 3 cl4 4 c3 0 32 Counter-timer Virtual Timer TimerValue register 
CNTKCTL _EL1 3 cl4 0 cl 0 32 Counter-timer Kernel Control register 
CNTKCTL_EL12 3 cl4 Ps cl 0 32 Counter-timer Kernel Control register 
CNTP_CTL_ELO 3 cl4 3 c2 1 32 Counter-timer Physical Timer Control register 
CNTP_CTL_EL02 3 cl4 2 c2 1 32 Counter-timer Physical Timer Control register 
CNTP_CVAL ELO 3 cl4 3 c2 2 64 Counter-timer Physical Timer CompareValue register 
CNTP_CVAL_EL02 3 cl4 5 c2 2 64 Counter-timer Physical Timer CompareValue register 
CNTP_TVAL ELO 3 cl4 3 c2 0 32 Counter-timer Physical Timer TimerValue register 
CNTP_TVAL_ EL02 3 cl4 5 c2 0 32 Counter-timer Physical Timer TimerValue register 
CNTPCT_ELO 3 cl4 3 c0 1 64 Counter-timer Physical Count register 
CNTPS_CTL_EL1 3 cl4 7 c2 1 32 Counter-timer Physical Secure Timer Control register 
CNTPS_CVAL EL1 3 cl4 7 c2 2 64 Counter-timer Physical Secure Timer Compare Value 
register 
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B2.2 AArch64 architectural system register summary 


Table B2-2 Other architecturally defined registers (continued) 




















































































































Name OpO |CRn |Op1 |CRm |Op2_ | Widt| Description 

h 
CNTPS_TVAL EL1 3 cl4 I c2 0 32 Counter-timer Physical Secure Timer TimerValue register 
CNTV_CTL_ELO 3 cl4 3 c3 1 32 Counter-timer Virtual Timer Control register 
CNTV_CTL_EL02 3 cl4 > c3 1 32 Counter-timer Virtual Timer Control register 
CNTV_CVAL _ELO 3 cl4 3 c3 2 64 Counter-timer Virtual Timer Compare Value register 
CNTV_CVAL_EL02 3 cl4 =) c3 2 64 Counter-timer Virtual Timer CompareValue register 
CNTV_TVAL_ ELO 3 cl4 3 c3 0 32 Counter-timer Virtual Timer TimerValue register 
CNTV_TVAL_EL02 3 cl4 > c3 0 32 Counter-timer Virtual Timer TimerValue register 
CNTVCT_ELO 3 cl4 3 c0 2 64 Counter-timer Virtual Count register 
CNTVOFF_ EL2 3 cl4 4 c0 3 64 Counter-timer Virtual Offset register 
CONTEXTIDR_EL1 3 c13 0 c0 1 32 Context ID Register (EL1) 
CONTEXTIDR EL12 |3 c13 5 c0 1 32 Context ID Register (EL12) 
CONTEXTIDR_EL2 3 c13 4 c0 1 32 Context ID Register (EL2) 
CPACR_EL12 3 cl > c0 2 32 Architectural Feature Access Control Register 
CPTR_EL3 3 cl 6 cl 2 32 Architectural Feature Trap Register (EL3) 
DACR32_EL2 3 c3 4 c0 0 32 Domain Access Control Register 
ESR_EL12 3 c5 5 c2 0 32 Exception Syndrome Register (EL12) 
FAR _EL1 3 c6 0 c0 0 64 Fault Address Register (EL1) 
FAR_EL12 3 c6 5 c0 0 64 Fault Address Register (EL12) 
FAR_EL2 3 c6 4 c0 0 64 Fault Address Register (EL2) 
FAR_EL3 3 c6 6 c0 0 64 Fault Address Register (EL3) 
FPEXC32_EL2 3 c5 4 c3 0 32 Floating-point Exception Control register 
HPFAR_ EL2 3 c6 4 c0 4 64 Hypervisor IPA Fault Address Register 
HSTR_EL2 3 cl 4 cl 3 32 Hypervisor System Trap Register 
ID_AA64AFRO EL1 3 c0 0 c5 4 64 AArché4 Auxiliary Feature Register 0 
ID_AA64AFRI ELI 3 c0 0 c5 5 64 AArché4 Auxiliary Feature Register 1 
ID_AA64DFRI EL1 3 c0 0 c5 1 64 AArch64 Debug Feature Register 1 
ID_AA64PFRI1_EL1 3 c0 0 c4 1 64 AArch64 Core Feature Register 1 
ISR_EL1 3 c12 0 cl 0 32 Interrupt Status Register 
LOREA ELI 3 cl0 0 c4 1 64 LORegion End Address Register 
LORSA_EL1 3 cl0 0 c4 0 64 LORegion Start Address Register 
MAIR EL1 3 cl0 0 c2 0 64 Memory Attribute Indirection Register (EL1) 
MAIR EL12 3 cl0 5 c2 0 64 Memory Attribute Indirection Register (EL12) 
MAIR EL2 3 cl0 4 c2 0 64 Memory Attribute Indirection Register (EL2) 
MAIR EL3 3 cl0 6 c2 0 64 Memory Attribute Indirection Register (EL3) 
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Table B2-2 Other architecturally defined registers (continued) 




























































































Name OpO |CRn |Op1 |CRm |Op2_ | Widt| Description 

h 
MDCR_EL2 3 cl 4 cl 1 32 Monitor Debug Configuration Register 
MVFRO EL1 3 c0 0 c3 0 32 AArch32 Media and VFP Feature Register 0 
MVFRI1 EL1 3 c0 0 c3 1 32 AArch32 Media and VFP Feature Register 1 
MVFR2 _ EL1 3 c0 0 c3 2 32 AArch32 Media and VFP Feature Register 2 
RMR_EL3 3 c12 6 c0 2 32 Reset Management Register 
SCR_EL3 3 cl 6 cl 0 32 Secure Configuration Register 
SDER32_EL3 3 cl 6 cl 1 32 AArch32 Secure Debug Enable Register 
TCR_EL12 3 c2 I c0 2 64 Translation Control Register (EL12) 
TPIDR_ELO 3 c13 3 c0 2 64 ELO Read/Write Software Thread ID Register 
TPIDR_EL1 3 c13 0 c0 4 64 EL1 Software Thread ID Register 
TPIDR_EL2 3 c13 4 c0 2 64 EL2 Software Thread ID Register 
TPIDR_ EL3 3 c13 6 c0 2 64 EL3 Software Thread ID Register 
TPIDRRO_ ELO 3 c13 3 c0 3 64 ELO Read-Only Software Thread ID Register 
TTBRO_EL12 3 c2 > c0 0 64 Translation Table Base Register 0 (EL12) 
TTBR1_EL12 3 c2 i) c0 1 64 Translation Table Base Register 1 (EL12) 
VBAR_EL1 3 c12 0 c0 0 64 Vector Base Address Register (EL1) 
VBAR_EL12 3 c12 BD) c0 0 64 Vector Base Address Register (EL12) 
VBAR_EL2 3 cl2 4 c0 0 64 Vector Base Address Register (EL2) 
VBAR_EL3 3 cl2 6 c0 0 64 Vector Base Address Register (EL3) 
VMPIDR_EL2 3 c0 4 c0 5 64 Virtualization Multiprocessor ID Register 
VPIDR_EL2 3 c0 4 c0 0 32 Virtualization Core ID Register 
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B2.3 AArch64 implementation defined register summary 
This section describes the AArch64 registers in the Cortex-A76 core that are implementation defined. 


The following tables lists the AArch 64 implementation defined registers, sorted by opcode. 


Table B2-3 AArch64 implementation defined registers 























Name Copro | CRn | Op1 | CRm | Op2 | Width | Description 

ATCR_EL1 3 clS |0 c7 0 32 Auxiliary Translation Control Register EL1 

ATCR_EL2 3 clS |4 c7 0 32 Auxiliary Translation Control Register EL2 

ATCR_EL12 3 clS |5 c7 0 32 Auxiliary Translation Control Register EL1 

ATCR_EL3 3 clS |6 c7 0 32 Auxiliary Translation Control Register EL3 

AVTCR_EL2 3 clS |4 c7 1 32 Auxiliary Virtualization Translation Control Register EL2 
CPUACTLR_EL1 3 cl5 |0 cl 0 64 B2.23 CPUACTLR_EL1, CPU Auxiliary Control Register, EL1 


on page B2-166 





CPUACTLR2 EL1 |3 clS |0 cl 1 64 B2.24 CPUACTLR2_EL1, CPU Auxiliary Control Register 2, 
ELI on page B2-168 





CPUACTLR3 EL1 |3 clS |0 cl 2 64 B2.25 CPUACTLR3_EL1, CPU Auxiliary Control Register 3, 
ELI on page B2-170 





CPUCFR_EL1 3 clS |0 c0 0 32 B2.26 CPUCFR_EL1, CPU Configuration Register, EL1 
on page B2-172 





CPUECTLR_EL1 3 clS |0 cl 4 64 B2.27 CPUECTLR_EL1, CPU Extended Control Register, EL1 
on page B2-174 





CPUPCR_EL3 3 clS |6 c8 1 64 B2.28 CPUPCR_EL3, CPU Private Control Register, EL3 
on page B2-182 





CPUPMR_EL3 3 clS |6 c8 3 64 B2.29 CPUPMR_EL3, CPU Private Mask Register, EL3 
on page B2-184 





CPUPOR_EL3 3 clS |6 c8 2 64 B2.30 CPUPOR_EL3, CPU Private Operation Register, EL3 
on page B2-186 





CPUPSELR_EL3 3 clS |6 c8 0 32 B2.31 CPUPSELR_EL3, CPU Private Selection Register, EL3 
on page B2-188 








CPUPWRCTLR EL] | 3 clS |0 c2 7 32 B2.32 CPUPWRCTLR_EL1, Power Control Register, EL1 
on page B2-190 





ERXPFGCDNR EL] |3 clS |0 c2 2 32 B2.44 ERXPFGCDNR_EL1, Selected Error Pseudo Fault 
Generation Count Down Register, ELI on page B2-205 





ERXPFGCTLR_EL1 |3 clS |0 c2 1 32 B2.45 ERXPFGCTLR_EL1, Selected Error Pseudo Fault 
Generation Control Register, EL1 on page B2-206 








ERXPFGFR_EL1 3 clS |0 c2 0 32 B2.46 ERXPFGFR_EL1, Selected Pseudo Fault Generation 
Feature Register, EL] on page B2-208 


























The following table shows the 32-bit wide implementation defined Cluster registers. Details of these 
registers can be found in Arm® DynamIQ™ Shared Unit Technical Reference Manual 
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Table B2-4 Cluster registers 









































































































































Name Copro | CRn | Opc1 | CRm | Opc2 | Width | Description 
CLUSTERCFR_EL1 3 clS |0 c3 0 32-bit | Cluster configuration register. 
CLUSTERIDR_EL1 3 cl5 |0 c3 1 32-bit | Cluster main revision ID. 
CLUSTEREVIDR_EL1 3 cl5 |0 c3 2 32-bit | Cluster ECO ID. 
CLUSTERACTLR_EL1 3 clS |0 c3 3 32-bit | Cluster auxiliary control register. 
CLUSTERECTLR_EL1 3 clS |0 c3 4 32-bit | Cluster extended control register. 
CLUSTERPWRCTLR_ EL1 3 clS |0 c3 =) 32-bit | Cluster power control register. 
CLUSTERPWRDN EL1 3 clS |0 c3 6 32-bit | Cluster power down register. 
CLUSTERPWRSTAT EL1 3 clS |0 c3 7 32-bit | Cluster power status register. 
CLUSTERTHREADSID_EL1 3 clS |0 c4 0 32-bit | Cluster thread scheme ID register. 
CLUSTERACPSID EL1 3 clS |0 c4 1 32-bit | Cluster ACP scheme ID register. 
CLUSTERSTASHSID EL1 3 clS |0 c4 2 32-bit | Cluster stash scheme ID register. 
CLUSTERPARTCR_EL1 3 clS |0 c4 3 32-bit | Cluster partition control register. 
CLUSTERBUSQOS _EL1 3 cl5 |0 c4 4 32-bit | Cluster bus QoS control register. 
CLUSTERL3HIT_EL1 3 clS |0 c4 5 32-bit | Cluster L3 hit counter register. 
CLUSTERL3MISS_EL1 3 clS |0 c4 6 32-bit | Cluster L3 miss counter register. 
CLUSTERTHREADSIDOVR ELI | 3 cl5 |0 c4 l 32-bit | Cluster thread scheme ID override register 
CLUSTERPMCR_ EL1 3 clS |0 c5 0 32-bit | Cluster Performance Monitors Control Register 
CLUSTERPMCNTENSET._ EL1 3 clS |0 c5 1 32-bit | Cluster Count Enable Set Register 
CLUSTERPMCNTENCLR_ EL1 3 clS |0 c5 2 32-bit | Cluster Count Enable Clear Register 
CLUSTERPMOVSSET EL1 3 clS |0 c5 3 32-bit | Cluster Overflow Flag Status Set 
CLUSTERPMOVSCLR_EL1 3 cl5 |0 c5 4 32-bit | Cluster Overflow Flag Status Clear 
CLUSTERPMSELR_ EL1 3 clS |0 c5 > 32-bit | Cluster Event Counter Selection Register 
CLUSTERPMINTENSET EL1 3 cl5 |0 c5 6 32-bit | Cluster Interrupt Enable Set Register 
CLUSTERPMINTENCLR_EL1 3 cl5S |0 c5 af 32-bit | Cluster Interrupt Enable Clear Register 
CLUSTERPMXEVTYPER_ EL1 3 clS |0 c6 1 32-bit | Cluster Selected Event Type and Filter Register 
CLUSTERPMXEVCNTR_EL1 3 cl5 |0 c6 2 32-bit | Cluster Selected Event Counter Register 
Reserved/RAZ 3 clS |0 c6 3 32-bit | Cluster Monitor Debug Configuration Register 
CLUSTERPMCEIDO EL1 3 cl5 |0 c6 4 32-bit | Cluster Common Event Identification IDO 
Register 
CLUSTERPMCEID1 ELI 3 cl5 |0 c6 B) 32-bit | Cluster Common Event Identification ID1 
Register 
CLUSTERPMCLAIMSET EL1 3 clS |0 c6 6 32-bit | Cluster Performance Monitor Claim Tag Set 
Register 
CLUSTERPMCLAIMCLR EL] 3 clS |0 c6 7 32-bit | Cluster Performance Monitor Claim Tag Clear 
Register 
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B2.4 AArch64 registers by functional group 
This section identifies the AArch64 registers by their functional groups and applies to the registers in the 
core that are implementation defined or have micro-architectural bit fields. Reset values are provided for 
these registers. 
Identification registers 
Name Type | Reset Description 
AIDR_EL1 RO | @xeeeee000 B2.14 AIDR_ELI, Auxiliary ID Register, ELI 
on page B2-155 
CCSIDR__EL1 RO |- B2.18 CCSIDR_EL1, Cache Size ID Register, ELI 
on page B2-159 
CLIDR_EL1 RO |* ©xC3@00123 if L3 cache present. | 82 79 CLIDR ELI, Cache Level ID Register, EL1 
* @x82000023 if no L3 cache. on page B2-161 
CSSELR_EL1 RW | UNK B2.33 CSSELR_ELI, Cache Size Selection Register, EL1 
on page B2-192 
CTR_ELO RO | @x8444c004 B2.34 CTR_ELO, Cache Type Register, ELO on page B2-193 
DCZID_ELO RO | 0x90000004 B2.35 DCZID_ELO, Data Cache Zero ID Register, ELO 
on page B2-195 
ERRIDR_EL1 RO | 0x@e0000002 B2.37 ERRIDR_ELI, Error ID Register, EL1 
on page B2-198 
ID_AA64AFRO ELI RO _ | 0xee000000 B2.53 ID_AA64AFRO_EL1, AArch64 Auxiliary Feature 
Register 0 on page B2-216 
ID_AA64AFR1 EL1 RO | 0xe9e000000 B2.54 ID_AA64AFR1_EL1, AArch64 Auxiliary Feature 
Register I on page B2-217 
ID_AA64DFRO_ELI |RO_ | @xe@e@e000010305408 B2.55 ID_AA64DFRO_ELI, AArch64 Debug Feature 
Register 0, ELI on page B2-218 
ID_AA64DFR1 ELI RO | 8xee008000 B2.56 ID_AA64DFRI1_EL1, AArch64 Debug Feature 


Register 1, ELI on page B2-220 





ID_AA64ISARO ELI |RO 


* @x@000100010211120 if the 
Cryptographic Extension is 


implemented. 


* @xQQ000100010210000 if the 
Cryptographic Extension is not 


B2.57 ID_AA64ISARO_EL1, AArch64 Instruction Set 
Attribute Register 0, EL1 on page B2-221 











implemented. 
ID_AA64ISARI EL] |RO | @xe@geee0000100001 B2.58 ID_AA64ISARI_EL1, AArch64 Instruction Set 
Attribute Register 1, EL1 on page B2-223 
ID_AA64MMFRO_EL1|RO | @xe@@0000000101122 B2.59 ID_AA64MMFRO_EL1, AArch64 Memory Model 
Feature Register 0, EL1 on page B2-224 
ID_AA64MMFRI1_EL1|RO | @xe@@@0000010212122 B2.60 ID_AA64MMFRI1_EL1, AArch64 Memory Model 














Feature Register 1, ELI on page B2-226 
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(continued) 





















































Name Type | Reset Description 
ID_AA64MMFR2_ EL1|RO | @xe@g@e000000001011 B2.61 ID_AA64MMFR2_EL1, AArch64 Memory Model 
Feature Register 2, ELI on page B2-228 
ID_AA64PFRO_ELI1 |RO |* @x1100@00010111112 if the B2.62 ID_AA64PFRO_EL1, AArch64 Processor Feature 
GICv4 interface is disabled. Register 0, EL1 on page B2-229 
* @x1100000011111112 if the 
GICVv4 interface is enabled. 
ID_AAG4PFRI EL1 |RO_ | exegeeeeeeeeeeeeie B2.63 ID_AA64PFRI_EL1, AArch64 Processor Feature 
Register 1, EL] on page B2-231 
ID_AFRO_EL1 RO | exeeeee00e B2.64 ID_AFRO ELI, AArch32 Auxiliary Feature Register 
0, ELI on page B2-232 
ID_DFRO_EL1 RO | @xe4e10088 B2.65 ID_DFRO_EL1, AArch32 Debug Feature Register 0, 
EL! on page B2-233 
ID_ISARO_EL1 RO | @x@2101110 B2.66 ID_ISARO_ELI, AArch32 Instruction Set Attribute 
Register 0, ELI on page B2-235 
ID_ISARI_ ELI RO | @x13112111 B2.67 ID_ISARI_ ELI, AArch32 Instruction Set Attribute 
Register 1, ELI on page B2-237 
ID_ISAR2_ EL] RO | @x21232042 B2.68 ID_ISAR2 ELI, AArch32 Instruction Set Attribute 
Register 2, ELI on page B2-239 
ID_ISAR3_EL1 RO | @x@1112131 B2.69 ID_ISAR3_EL1, AArch32 Instruction Set Attribute 
Register 3, EL] on page B2-241 
ID_ISAR4 EL] RO | @xeee10142 B2.70 ID_ISAR4_EL1, AArch32 Instruction Set Attribute 
Register 4, ELI on page B2-243 
ID_ISARS_EL1 RO | @x@1011121 B2.71 ID_ISAR5 ELI, AArch32 Instruction Set Attribute 
iD SARS hay thevalus oxo1neogs |" ee ee 
if the Cryptographic Extension is not 
implemented and enabled. 
ID_ISAR6_EL1 RO | @xeeee0010 B2.72 ID_ISAR6_EL1, AArch32 Instruction Set Attribute 
Register 6, ELI on page B2-247 
ID_MMFRO_EL1 RO | @x19201105 B2.73 ID_MMFRO_EL1, AArch32 Memory Model Feature 
Register 0, ELI on page B2-248 
ID_MMFR1_EL1 RO | @x4ee00000 B2.74 ID_MMFRI_ELI, AArch32 Memory Model Feature 
Register 1, ELI on page B2-250 
ID_MMFR2_EL1 RO | e@xe1260000 B2.75 ID_MMFR2_EL1, AArch32 Memory Model Feature 
Register 2, ELI on page B2-252 
ID_MMFR3_EL1 RO | @x@2122211 B2.76 ID_MMFR3_ELI, AArch32 Memory Model Feature 




















Register 3, ELI on page B2-254 
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Name Type | Reset Description 
ID_MMFR4 EL] RO | @xeee21110 B2.77 ID_MMFR4_ELI, AArch32 Memory Model Feature 
Register 4, ELI on page B2-256 
ID_PFRO_EL1 RO | @x19010131 B2.78 ID_PFRO_EL1, AArch32 Processor Feature Register 
0, ELI on page B2-258 
ID_PFRI_EL1 RO | @x10010000 B2.79 ID_PFR1_ ELI, AArch32 Processor Feature Register 
Bits [31:28] are @x1 ifthe Gic cpu | & 247 01 Page B2-260 
interface is implemented and enabled, 
and @x@ otherwise. 
ID_PFR2_EL1 RO | exeee0eee11 B2.80 ID_PFR2_EL1, AArch32 Processor Feature Register 
2, ELI on page B2-262 
LORID_EL1 RO | exeeeeeeeee0040004 B2.82 LORID_ELI, LORegion ID Register, EL1 
on page B2-264 
MIDR_EL1 RO | @x413FD@B1 B2.85 MIDR_EL1, Main ID Register, EL] on page B2-268 
MPIDR_EL1 RO | The reset value depends on B2.86 MPIDR_EL1, Multiprocessor Affinity Register, EL1 
CLUSTERIDAFF2[7:0] and on page B2-269 
CLUSTERIDAFF3[7:0]. See register 
description for details. 
REVIDR_EL1 RO | exeeeee0e0 B2.88 REVIDR_ELI, Revision ID Register, ELI 
on page B2-272 
VMPIDR_EL2 RW | The reset value is the value of Virtualization Multiprocessor ID Register EL2 
MPIDR_ELI. 
VPIDR_EL2 RW | The reset value is the value of 


MIDR ELI. 











Virtualization Core ID Register EL2 








Other system control registers 






































Name Type | Description 

ACTLR_EL] |RW_ | 82.5 ACTLR_ELI, Auxiliary Control Register, EL1 on page B2-144 

ACTLR_EL2 |RW | 82.6 ACTLR_EL2, Auxiliary Control Register, EL2 on page B2-145 

ACTLR_EL3 |RW_ | 82.7 ACTLR_EL3, Auxiliary Control Register, EL3 on page B2-147 

CPACR_ELI |RW | 32.20 CPA CR_ELI, Architectural Feature Access Control Register, EL1 on page B2-163 
SCTLR_EL1 |RW | 32.9] SCTLR_ELI, System Control Register, ELI on page B2-275 

SCTLR_EL2 |RW | 32.92 SCTLR_EL2, System Control Register, EL2 on page B2-277 

SCTLR_EL3 |RW | 32.93 SCTLR_EL3, System Control Register, EL3 on page B2-278 

SCTLR_EL12|RW | 32.9] SCTLR_ELI, System Control Register, EL1 on page B2-275 
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Reliability, Availability, Serviceability (RAS) registers 














Name Type | Description 

DISR_EL1 RW | 382.36 DISR_EL1, Deferred Interrupt Status Register, ELI] on page B2-196 
ERRIDR_EL1 RW | 82.37 ERRIDR_ELI, Error ID Register, ELI on page B2-198 
ERRSELR_EL1 RW | 82.38 ERRSELR_ELI, Error Record Select Register, ELI on page B2-199 





ERXADDR_ELI RW | 82.39 ERXADDR ELI, Selected Error Record Address Register, EL1 on page B2-200 





ERXCTLR_ ELI RW | 82.40 ERXCTLR_ELI, Selected Error Record Control Register, ELI on page B2-201 





ERXFR_EL1 RO | 82.41 ERXFR_ELI, Selected Error Record Feature Register, EL] on page B2-202 





ERXMISCO_EL1 RW | 82.42 ERXMISCO_ELI, Selected Error Record Miscellaneous Register 0, ELI on page B2-203 





ERXMISC1_EL1 RW | B2.43 ERXMISCI _EL1, Selected Error Record Miscellaneous Register 1, EL] on page B2-204 





ERXSTATUS ELI |RW | 82.47 ERXSTATUS_ELI, Selected Error Record Primary Status Register, ELI on page B2-209 





ERXPFGCDNR_EL1|RW | 32 44 ERYPFGCDNR_ELI, Selected Error Pseudo Fault Generation Count Down Register, ELI 
on page B2-205 





ERXPFCTLR_ELI |RW | 32.45 ERXPFGCTLR_ELI, Selected Error Pseudo Fault Generation Control Register, ELI 
on page B2-206 





ERXPFGFR_EL1 RO | 82.46 ERXPF GFR_EL1, Selected Pseudo Fault Generation Feature Register, ELI on page B2-208 











HCR_EL2 RW | B2.52 HCR_EL2, Hypervisor Configuration Register, EL2 on page B2-214 
VDISR_EL2 RW | B2.102 VDISR_EL2, Virtual Deferred Interrupt Status Register, EL2 on page B2-288 
VSESR_EL2 RW | 82.103 VSESR_EL2, Virtual SError Exception Syndrome Register on page B2-289 














Virtual Memory control registers 





Name Type | Description 





AMAIR_EL1/RW_ | 22.15 AMAIR_EL1, Auxiliary Memory Attribute Indirection Register, EL1 on page B2-156 





AMAIR_EL2)/RW | 32.16 AMAIR_EL2, Auxiliary Memory Attribute Indirection Register, EL2 on page B2-157 





AMAIR_EL3)RW = | 82.17 AMAIR_EL3, Auxiliary Memory Attribute Indirection Register, EL3 on page B2-158 





ATCR_EL1 |RW_ | Auxiliary Translation Control Register EL1 





ATCR_EL2 |RW _ | Auxiliary Translation Control Register EL2 





ATCR_EL12 |RW_ | Virtual host extension to ATCR_EL1 





ATCR_EL3 |RW_ | Auxiliary Translation Control Register EL3 





AVTCR_EL2 |RW_ | Auxiliary Virtualization Translation Control Register EL2 





LORC_EL1] |RW | 82.81 LORC_ELI, LORegion Control Register, ELI on page B2-263 





LOREA ELI) RW LORegion End Address Register EL1 





LORID_EL! |RO | 82.82 LORID_ELI, LORegion ID Register, ELI on page B2-264 
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Name Type | Description 





LORN_ELI |RW_ | 82.83 LORN ELI, LORegion Number Register, EL1 on page B2-265 





LORSA_ELI | RW LORegion Start Address Register EL1 





TCR_EL1 = =|RW_ | 82.94 TCR_ELI, Translation Control Register, ELI on page B2-280 





TCR_EL2 =| RW _ | 82.95 TCR_EL2, Translation Control Register, EL2 on page B2-281 





TCR_EL3 | RW_ | 82.96 TCR_EL3, Translation Control Register, EL3 on page B2-282 





TTBRO_EL! |RW | 82.97 TTBRO_ELI, Translation Table Base Register 0, EL1 on page B2-283 





TTBRO_EL2 |RW | 82.98 TTBRO_EL2, Translation Table Base Register 0, EL2 on page B2-284 





TTBRO_EL3 |RW_ | 82.99 TTBRO_EL3, Translation Table Base Register 0, EL3 on page B2-285 





TTBR1_ELI |RW | 82.100 TTBRI_ELI, Translation Table Base Register 1, EL1 on page B2-286 





TTBR1_EL2 |RW | 82.10] TTBRI_EL2, Translation Table Base Register 1, EL2 on page B2-287 





VTTBR_EL2|RW | 82.105 VITBR_EL2, Virtualization Translation Table Base Register, EL2 on page B2-291 














Virtualization registers 





Name Type | Description 





ACTLR_EL2 |RW | 82.6 ACTLR_EL2, Auxiliary Control Register, EL2 on page B2-145 





AFSRO_EL2 |RW | 82.9 AFSRO_EL2, Auxiliary Fault Status Register 0, EL2 on page B2-150 





AFSRI_EL2 |RW_ | 32 12 AFSRI_EL2, Auxiliary Fault Status Register 1, EL2 on page B2-153 





AMAIR_EL2 |RW_ | 82.16 AMAIR_EL2, Auxiliary Memory Attribute Indirection Register, EL2 on page B2-157 





CPTR_EL2 = =|RW_ | 82.21 CPTR_EL2, Architectural Feature Trap Register, EL2 on page B2-164 





ESR_EL2 RW | 82.49 ESR_EL2, Exception Syndrome Register, EL2 on page B2-211 





HACR_EL2 |RW | 82.51 HACR_EL2, Hyp Auxiliary Configuration Register, EL2 on page B2-213 





HCR_EL2 RW | 82.52 HCR_EL2, Hypervisor Configuration Register, EL2 on page B2-214 





HPFAR_EL2 | RW Hypervisor IPA Fault Address Register EL2 





TCR_EL2 RW | 82.95 T CR_EL2, Translation Control Register, EL2 on page B2-281 





VMPIDR_EL2)RW__| Virtualization Multiprocessor ID Register EL2 





VPIDR_EL2 |RW_ | Virtualization Core ID Register EL2 





VSESR_EL2 |RW_ | 82.103 VSESR_EL2, Virtual SError Exception Syndrome Register on page B2-289 





VTCR_EL2 RW_ | B2.104 VTCR_EL2, Virtualization Translation Control Register, EL2 on page B2-290 





VTTBR_EL2 |RW_ | 82.105 VITBR_EL2, Virtualization Translation Table Base Register, EL2 on page B2-291 
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B2 AArch64 system registers 
B2.4 AArch64 registers by functional group 


Exception and fault handling registers 












































Name Type | Description 

AFSRO_ELI |RW | 82.8 AFSRO_ELI, Auxiliary Fault Status Register 0, EL] on page B2-149 
AFSRO_EL2 |RW | 82.9 AFSRO_EL2, Auxiliary Fault Status Register 0, EL2 on page B2-150 
AFSRO_EL3 |RW | 82.10 AFSRO_EL3, Auxiliary Fault Status Register 0, EL3 on page B2-151 
AFSRI_ELI |RW | 82.1] AFSRI_ELI, Auxiliary Fault Status Register 1, EL1 on page B2-152 
AFSRI_EL2 |RW | 82.12 AFSRI_EL2, Auxiliary Fault Status Register 1, EL2 on page B2-153 
AFSRI_EL3 |RW | 32 13 AFSR1I_EL3, Auxiliary Fault Status Register I, EL3 on page B2-154 
DISR_EL1 |RW | 2 36 DISR_ELI, Deferred Interrupt Status Register, EL1 on page B2-196 
ESR_EL1  |RW | 3248 ESR_ELI, Exception Syndrome Register, ELI on page B2-210 

ESR_EL2 RW | 82.49 ESR_EL2, Exception Syndrome Register, EL2 on page B2-211 

ESR_EL3 RW | 82.50 ESR_EL3, Exception Syndrome Register, EL3 on page B2-212 
HPFAR_EL2 | RW Hypervisor IPA Fault Address Register EL2 

VDISR_EL2 |RW_ | 82 102 VDISR_EL2, Virtual Deferred Interrupt Status Register, EL2 on page B2-288 
VSESR_EL2|RW_ | 22.103 VSESR_EL2, Virtual SError Exception Syndrome Register on page B2-289 











Implementation defined registers 















































Name Type | Description 
ATCR_EL1 RW _| Auxiliary Translation Control Register EL1 
ATCR_EL2 RW_ | Auxiliary Translation Control Register EL2 
ATCR_EL3 RW_| Auxiliary Translation Control Register EL3 
ATCR_EL12 RW _| Virtual host extension to ATCR_EL1 
AVTCR_EL2 RW_| Auxiliary Virtualization Translation Control Register EL2 
CPUACTLR_EL1 =| RW | 82.23 CPUACTLR_ELI, CPU Auxiliary Control Register, EL1 on page B2-166 
CPUACTLR2 ELI |RW_ | 82.24 CPUACTLR2_ELI, CPU Auxiliary Control Register 2, ELI on page B2-168 
CPUCFR_EL1 RO | B2.26 CPUCFR_ELI, CPU Configuration Register, EL1 on page B2-172 
CPUECTLR_EL1 RW | B2.27 CPUECTLR_EL1, CPU Extended Control Register, ELI on page B2-174 
CPUPWRCTLR_EL1|RW_ | 82.32 CPUPWRCTLR_ELI, Power Control Register, EL1 on page B2-190 
ERXPFGCDNR_ ELI |RW_ | 82 44 ERXPF GCDNR_EL1, Selected Error Pseudo Fault Generation Count Down Register, ELI 
on page B2-205 
ERXPFGCTLR_EL1 |RW | 32.45 ERXPFGCTLR_ELI, Selected Error Pseudo Fault Generation Control Register, ELI 
on page B2-206 
ERXPFGFR_EL1 RW | B2.46 ERXPF GFR_EL1, Selected Pseudo Fault Generation Feature Register, ELI on page B2-208 
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B2 AArch64 system registers 
B2.4 AArch64 registers by functional group 


The following table shows the 32-bit wide implementation defined Cluster registers. Details of these 
registers can be found in Arm® DynamIQ™ Shared Unit Technical Reference Manual 


Table B2-5 Cluster registers 





































































































Name Copro | CRn | Opc1 | CRm | Opc2 | Width | Description 
CLUSTERCFR_EL1 3 clS |0 c3 0 32-bit | Cluster configuration register. 
CLUSTERIDR_EL1 3 cl5 |0 c3 1 32-bit | Cluster main revision ID. 
CLUSTEREVIDR_EL1 3 cl5 |0 c3 2 32-bit | Cluster ECO ID. 
CLUSTERACTLR_EL1 3 clS |0 c3 3 32-bit | Cluster auxiliary control register. 
CLUSTERECTLR_EL1 3 clS |0 c3 4 32-bit | Cluster extended control register. 
CLUSTERPWRCTLR_EL1 3 clS |0 c3 5 32-bit | Cluster power control register. 
CLUSTERPWRDN EL1 3 clS |0 c3 6 32-bit | Cluster power down register. 
CLUSTERPWRSTAT EL1 3 clS |0 c3 7 32-bit | Cluster power status register. 
CLUSTERTHREADSID_EL1 3 clS |0 c4 0 32-bit | Cluster thread scheme ID register. 
CLUSTERACPSID EL1 3 clS |0 c4 1 32-bit | Cluster ACP scheme ID register. 
CLUSTERSTASHSID EL1 3 clS |0 c4 2 32-bit | Cluster stash scheme ID register. 
CLUSTERPARTCR_EL1 3 cl5 |0 c4 3 32-bit | Cluster partition control register. 
CLUSTERBUSQOS _EL1 3 cl5 |0 c4 4 32-bit | Cluster bus QoS control register. 
CLUSTERL3HIT_EL1 3 clS |0 c4 5 32-bit | Cluster L3 hit counter register. 
CLUSTERL3MISS_EL1 3 clS |0 c4 6 32-bit | Cluster L3 miss counter register. 
CLUSTERTHREADSIDOVR ELI | 3 clS |0 c4 7 32-bit | Cluster thread scheme ID override register 
CLUSTERPMCR ELI] 3 clS |0 c5 0 32-bit | Cluster Performance Monitors Control Register 
CLUSTERPMCNTENSET EL1 3 clS |0 c5 1 32-bit | Cluster Count Enable Set Register 
CLUSTERPMCNTENCLR_EL1 3 clS |0 c5 2 32-bit | Cluster Count Enable Clear Register 
CLUSTERPMOVSSET EL1 3 clS |0 c5 3 32-bit | Cluster Overflow Flag Status Set 
CLUSTERPMOVSCLR_EL1 3 clS |0 c5 4 32-bit | Cluster Overflow Flag Status Clear 
CLUSTERPMSELR EL] 3 clS |0 c5 5 32-bit | Cluster Event Counter Selection Register 
CLUSTERPMINTENSET EL1 3 cl5 |0 c5 6 32-bit | Cluster Interrupt Enable Set Register 
CLUSTERPMINTENCLR ELI 3 cl5 |0 c5 L 32-bit | Cluster Interrupt Enable Clear Register 
CLUSTERPMXEVTYPER_ EL1 3 clS |0 c6 1 32-bit | Cluster Selected Event Type and Filter Register 
CLUSTERPMXEVCNTR_EL1 3 clS |0 c6 2 32-bit | Cluster Selected Event Counter Register 
Reserved/RAZ 3 clS |0 c6 3 32-bit | Cluster Monitor Debug Configuration Register 
CLUSTERPMCEIDO ELI 3 cl5 |0 c6 4 32-bit | Cluster Common Event Identification IDO 
Register 
CLUSTERPMCEID1 ELI 3 cl5 |0 c6 5 32-bit | Cluster Common Event Identification ID1 
Register 
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B2 AArch64 system registers 


B2.4 AArch64 registers by functional group 


Table B2-5 Cluster registers (continued) 









































Name Copro | CRn | Opc1 | CRm | Opc2 | Width | Description 
CLUSTERPMCLAIMSET EL1 3 clS |0 c6 6 32-bit | Cluster Performance Monitor Claim Tag Set 
Register 
CLUSTERPMCLAIMCLR EL] 3 clS |0 c6 L 32-bit | Cluster Performance Monitor Claim Tag Clear 
Register 
Security 
Name Type | Description 
ACTLR_EL3 |RW | 32.7 ACTLR_EL3, Auxiliary Control Register, EL3 on page B2-147 
AFSRO_EL3 |RW | 82 10 AFSRO_EL3, Auxiliary Fault Status Register 0, EL3 on page B2-151 
AFSRI_EL3 |RW | 32 13 AFSRI_EL3, Auxiliary Fault Status Register 1, EL3 on page B2-154 
AMAIR_EL3 | RW | 82.17 AMAIR_EL3, Auxiliary Memory Attribute Indirection Register, EL3 on page B2-158 
CPTR_EL3 |RW | 32.22 CPT. R_EL3, Architectural Feature Trap Register, EL3 on page B2-165 
MDCR_EL3 | RW 





























B2.84 MDCR_EL3, Monitor Debug Configuration Register, EL3 on page B2-266 





Reset management registers 





Name 


Type | Description 





RMR_EL3 RW 


B2.89 RMR_EL3, Reset Management Register on page B2-273 








RVBAR_EL3 | RW 








B2.90 RVBAR_EL3, Reset Vector Base Address Register, EL3 on page B2-274 








Address registers 





Name 


Type | Description 





PAR ELI 








RW | B2.87 PAR_ELI, Physical Address Register, EL1 on page B2-271 
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B2 AArch64 system registers 
B2.5 ACTLR_EL1, Auxiliary Control Register, EL1 


B2.5 ACTLR_EL41, Auxiliary Control Register, EL1 


ACTLR_ELI provides IMPLEMENTATION DEFINED configuration and control options for execution at EL1 
and ELO. 


Bit field descriptions 
ACTLR_ELI is a 64-bit register, and is part of: 


¢ The Other system control registers functional group. 
¢ The IMPLEMENTATION DEFINED functional group. 


63 0 


RESO 


Figure B2-1 ACTLR_EL1 bit assignments 
RESO, [63:0] 
RESO Reserved. 
Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv6, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.6 ACTLR_EL2, Auxiliary Control Register, EL2 


B2.6 ACTLR_EL42, Auxiliary Control Register, EL2 


The ACTLR_EL2 provides IMPLEMENTATION DEFINED configuration and control options for EL2. 


Bit field descriptions 

ACTLR_EL2 is a 64-bit register, and is part of: 

¢ The Virtualization registers functional group. 

¢ The Other system control registers functional group. 
¢ The IMPLEMENTATION DEFINED functional group. 











63 13 1211 10 876543210 
CLUSTERPMUEN —! 
SMEN 
PWREN 
ERXPFGEN 
AMEN 
ECTLREN —4 
ACTLREN 
RESO 


Figure B2-2 ACTLR_EL2 bit assignments 
RESO, [63:13] 
RESO Reserved. 
CLUSTERPMUEN, [12] 
Performance Management Registers enable. The possible values are: 


7) CLUSTERPM* registers are not write-accessible from a lower Exception level. This is 
the reset value. 


1 CLUSTERPM* registers are write-accessible from EL1 Non-secure if they are write- 
accessible from EL2. 


SMEN, [11] 
Scheme Management Registers enable. The possible values are: 


() Registers CLUSTERACPSID, CLUSTERSTASHSID, CLUSTERPARTCR, 
CLUSTERBUSQOS, and CLUSTERTHREADSIDOVR are not write-accessible from 
EL1 Non-secure. This is the reset value. 


1 Registers CLUSTERACPSID, CLUSTERSTASHSID, CLUSTERPARTCR, 
CLUSTERBUSQOS, and CLUSTERTHREADSIDOVR are write-accessible from 
ELI Non-secure if they are write-accessible from EL2. 


RESO, [9:8] 
RESO Reserved. 
PWREN, [7] 


Power Control Registers enable. The possible values are: 
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B2 AArch64 system registers 
B2.6 ACTLR_EL2, Auxiliary Control Register, EL2 


@ Registers CPUPWRCTLR, CLUSTERPWRCTLR, CLUSTERPWRDN, 
CLUSTERPWRSTAT, CLUSTERL3HIT and CLUSTERL3MISS are not write- 
accessible from EL1 Non-secure. This is the reset value. 


1 Registers CPUPWRCTLR, CLUSTERPWRCTLR, CLUSTERPWRDN, 
CLUSTERPWRSTAT, CLUSTERL3HIT and CLUSTERL3MISS are write-accessible 
from EL1 Non-secure if they are write-accessible from EL2. 


RESO, [6] 


RESO Reserved. 


ERXPFGEN, [5] 


Error Record Registers enable. The possible values are: 


) ERXPFG* are not write-accessible from EL1 Non-secure. This is the reset value. 
1 ERXPFG* are write-accessible from EL1 Non-secure if they are write-accessible from 
EL2. 
AMEN, [4] 
Activity Monitor enable. The possible values are: 
7) Non-secure accesses from EL1 and EL0 to activity monitor registers are trapped to 
EL2. 
1 Non-secure accesses from EL1 and ELO to activity monitor registers are not trapped to 
EL2. 
RESO, [3:2] 


RESO Reserved. 


ECTLREN, [1] 


Extended Control Registers enable. The possible values are: 


) CPUECTLR and CLUSTERECTLR are not write-accessible from EL1 Non-secure. 
This is the reset value. 
1 CPUECTLR and CLUSTERECTLR are write-accessible from EL1 Non-secure if they 


are write-accessible from EL2. 


Configurations 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.7 ACTLR_EL3, Auxiliary Control Register, EL3 


B2.7 ACTLR_EL3, Auxiliary Control Register, EL3 


The ACTLR_EL3 provides IMPLEMENTATION DEFINED configuration and control options for EL3. 


Bit field descriptions 

ACTLR_EL3 is a 64-bit register, and is part of: 

¢ The Other system control registers functional group. 
¢ The Security registers functional group. 

¢ The IMPLEMENTATION DEFINED functional group. 











63 13 12.11 10 876543210 
CLUSTERPMUEN —! 
SMEN 
PWREN 
ERXPFGEN 
AMEN 
ECTLREN —4 
ACTLREN 
RESO 


Figure B2-3 ACTLR_EL3 bit assignments 
RESO, [63:13] 
RESO Reserved. 
CLUSTERPMUEN, [12] 


Performance Management Registers enable. The possible values are: 


7) CLUSTERPM* registers are not write-accessible from a lower Exception level. This is 
the reset value. 
1 CLUSTERPM* registers are write-accessible from EL2 and EL1 Secure. 
SMEN, [11] 


Scheme Management Registers enable. The possible values are: 


) Registers CLUSTERACPSID, CLUSTERSTASHSID, CLUSTERPARTCR, 
CLUSTERBUSQOS, and CLUSTERTHREADSIDOVR are not write-accessible from 
EL2 and ELI Secure. This is the reset value. 

1 Registers CLUSTERACPSID, CLUSTERSTASHSID, CLUSTERPARTCR, 
CLUSTERBUSQOS, and CLUSTERTHREADSIDOVR are write-accessible from 
EL2 and ELI Secure. 


TSIDEN, [10] 


Thread Scheme ID Register enable. The possible values are: 





7) Register CLUSTERTHREADSID is not write-accessible from EL2 and EL1 Secure. 
This is the reset value. 
1 Register CLUSTERTHREADSID is write-accessible from EL2 and EL1 Secure. 
RESO, [9:8] 
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B2 AArch64 system registers 
B2.7 ACTLR_EL3, Auxiliary Control Register, EL3 


RESO Reserved. 


PWREN, [7] 
Power Control Registers enable. The possible values are: 


@ Registers CPUPWRCTLR, CLUSTERPWRCTLR, CLUSTERPWRDN, 
CLUSTERPWRSTAT, CLUSTERL3HIT and CLUSTERL3MISS are not write- 
accessible from EL2 and EL1 Secure. This is the reset value. 


1 Registers CPUPWRCTLR, CLUSTERPWRCTLR, CLUSTERPWRDN, 
CLUSTERPWRSTAT, CLUSTERL3HIT and CLUSTERL3MISS are write-accessible 
from EL2 and EL1 Secure. 


RESO, [6] 
RESO Reserved. 
ERXPFGEN, [5] 


Error Record Registers enable. The possible values are: 


@ ERXPFG* are not write-accessible from EL2 and EL1 Secure. This is the reset value. 
1 ERXPFG* are write-accessible from EL2 and EL! Secure. 
AMEN, [4] 
Activity Monitor enable. The possible values are: 
7) Accesses from EL2, EL1 and ELO to activity monitor registers are trapped to EL3. 
1 Accesses from EL2, EL1 and EL0 to activity monitor registers are not trapped to EL3. 
RESO, [3:2] 


RESO Reserved. 


ECTLREN, [1] 


Extended Control Registers enable. The possible values are: 


e CPUECTLR and CLUSTERECTLR are not write-accessible from EL2 and EL1 
Secure. This is the reset value. 
1 CPUECTLR and CLUSTERECTLR are write-accessible from EL2 and EL1 Secure. 
Configurations 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.8 AFSRO_EL1, Auxiliary Fault Status Register 0, EL1 


B2.8 AFSRO_EL1, Auxiliary Fault Status Register 0, EL1 


AFSRO_ ELI provides additional IMPLEMENTATION DEFINED fault status information for exceptions that are 
taken to EL1. In the Cortex-A76 core, no additional information is provided for these exceptions. 
Therefore this register is not used. 


Bit field descriptions 
AFSRO_ELI is a 32-bit register, and is part of: 


¢ The Exception and fault handling registers functional group. 
¢ The IMPLEMENTATION DEFINED functional group. 


31 0 


po 


RESO 


Figure B2-4 AFSRO_EL1 bit assignments 
RESO, [31:0] 
Reserved, RESO. 
Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.9 AFSRO_EL2, Auxiliary Fault Status Register 0, EL2 


B2.9 AFSRO_EL2, Auxiliary Fault Status Register 0, EL2 


AFSRO_EL2 provides additional IMPLEMENTATION DEFINED fault status information for exceptions that are 
taken to EL2. 


Bit field descriptions 

AFSRO_EL2 is a 32-bit register, and is part of: 

¢ The Virtualization registers functional group. 

¢ The Exception and fault handling registers functional group. 
¢ The IMPLEMENTATION DEFINED functional group. 


31 0 


po 


RESO 


Figure B2-5 AFSRO_EL2 bit assignments 
RESO, [31:0] 
Reserved, RESO. 
Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.10 AFSRO_EL3, Auxiliary Fault Status Register 0, EL3 


B2.10 AFSRO_EL3, Auxiliary Fault Status Register 0, EL3 


AFSRO_EL3 provides additional IMPLEMENTATION DEFINED fault status information for exceptions that are 
taken to EL3. In the Cortex-A76 core, no additional information is provided for these exceptions. 
Therefore this register is not used. 


Bit field descriptions 
AFSRO_EL3 is a 32-bit register, and is part of: 


¢ The Exception and fault handling registers functional group. 
¢ The Security registers functional group. 
¢ The IMPLEMENTATION DEFINED functional group. 


31 0 


P| 


RESO 


Figure B2-6 AFSRO_EL3 bit assignments 
RESO, [31:0] 
Reserved, RESO. 
Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.11 AFSR1_EL1, Auxiliary Fault Status Register 1, EL1 


B2.11 AFSR1_EL1, Auxiliary Fault Status Register 1, EL1 


AFSRI1_ ELI provides additional IMPLEMENTATION DEFINED fault status information for exceptions that are 
taken to EL1. This register is not used in Cortex-A76. 


Bit field descriptions 
AFSR1_ELI is a 32-bit register, and is part of: 


¢ The Exception and fault handling registers functional group. 
¢ The IMPLEMENTATION DEFINED functional group. 


31 0 


Sea 


RESO 


Figure B2-7 AFSR1_EL1 bit assignments 
RESO, [31:0] 
Reserved, RESO. 
Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.12 AFSR1_EL2, Auxiliary Fault Status Register 1, EL2 


B2.12 AFSR1_EL2, Auxiliary Fault Status Register 1, EL2 


AFSR1_ EL2 provides additional IMPLEMENTATION DEFINED fault status information for exceptions that are 
taken to EL2. This register is not used in the Cortex-A76 core. 


Bit field descriptions 

AFSR1_EL2 is a 32-bit register, and is part of: 

¢ The Virtualization registers functional group. 

¢ The Exception and fault handling registers functional group. 
¢ The IMPLEMENTATION DEFINED functional group. 


31 0 


po 


RESO 


Figure B2-8 AFSR1_EL2 bit assignments 
RESO, [31:0] 
Reserved, RESO. 
Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.13 AFSR1_EL3, Auxiliary Fault Status Register 1, EL3 


B2.13  AFSR1_EL3, Auxiliary Fault Status Register 1, EL3 


AFSR1_EL3 provides additional IMPLEMENTATION DEFINED fault status information for exceptions that are 
taken to EL3. This register is not used in the Cortex-A76 core. 


Bit field descriptions 
AFSR1_EL3 is a 32-bit register, and is part of: 


¢ The Exception and fault handling registers functional group. 
¢ The Security registers functional group. 
¢ The IMPLEMENTATION DEFINED functional group. 


31 0 


po 


RESO 


Figure B2-9 AFSR1_EL3 bit assignments 
RESO, [31:0] 
Reserved, RESO. 
Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.14 AIDR_EL1, Auxiliary ID Register, EL1 


B2.14 AIDR_EL1, Auxiliary ID Register, EL1 


AIDR_ELI provides IMPLEMENTATION DEFINED identification information. This register is not used in the 
A76 core. 


Bit field descriptions 
AIDR_ELI is a 32-bit register, and is part of: 


¢ The Identification registers functional group. 
¢ The IMPLEMENTATION DEFINED functional group. 


This register is Read Only. 


31 0 


po 


RESO 


Figure B2-10 AIDR_EL1 bit assignments 
RESO, [31:0] 
Reserved, RESO. 
Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.15 AMAIR_EL1, Auxiliary Memory Attribute Indirection Register, EL1 


B2.15 AMAIR_EL1, Auxiliary Memory Attribute Indirection Register, EL1 


AMAIR_ ELI provides IMPLEMENTATION DEFINED memory attributes for the memory regions specified by 
MAIR ELI. This register is not used in the Cortex-A76 core. 


Bit field descriptions 
AMAIR ELI is a 64-bit register, and is part of: 


¢ The Virtual memory control registers functional group. 
¢ The IMPLEMENTATION DEFINED functional group. 


63 0 


RESO 


Figure B2-11 AMAIR_EL1 bit assignments 
RESO, [63:0] 
Reserved, RESO. 
Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.16 AMAIR_EL2, Auxiliary Memory Attribute Indirection Register, EL2 


B2.16 AMAIR_EL2, Auxiliary Memory Attribute Indirection Register, EL2 


AMAIR_EL2 provides IMPLEMENTATION DEFINED memory attributes for the memory regions specified by 
MAIR _EL2. This register is not used in the Cortex-A76 core. 


Bit field descriptions 

AMAIR EL2 is a 64-bit register, and is part of: 

¢ The Virtualization registers functional group. 

¢ The Virtual memory control registers functional group. 
¢ The IMPLEMENTATION DEFINED functional group. 


63 0 


RESO 


Figure B2-12 AMAIR_EL1 bit assignments 
RESO, [63:0] 
Reserved, RESO. 
Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.17 AMAIR_EL3, Auxiliary Memory Attribute Indirection Register, EL3 


B2.17 AMAIR_EL3, Auxiliary Memory Attribute Indirection Register, EL3 


AMAIR_EL3 provides IMPLEMENTATION DEFINED memory attributes for the memory regions specified by 
MAIR EL3. This register is not used in the Cortex-A76 core. 


Bit field descriptions 
AMAIR EL3 is a 64-bit register, and is part of: 


¢ The Virtual memory control registers functional group. 
¢ The Security registers functional group. 
¢ The IMPLEMENTATION DEFINED functional group. 


63 0 


RESO 


Figure B2-13 AMAIR_EL3 bit assignments 
RESO, [63:0] 
Reserved, RESO. 
Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.18 CCSIDR_EL1, Cache Size ID Register, EL1 


CCSIDR_EL1, Cache Size ID Register, EL1 


The CCSIDR_EL1 provides information about the architecture of the currently selected cache. 


Bit field descriptions 
CCSIDR_ELI is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


31 30 29 28 27 13 12 3 2 0 


| NumSets Associativity 
wt — L_ WA LineSize — 
WB RA 


Figure B2-14 CCSIDR_EL1 bit assignments 





WT, [31] 
Indicates whether the selected cache level supports Write-Through: 
) Cache Write-Through is not supported at any level. 
For more information about encoding, see CCSIDR_ELI/ encodings on page B2-160. 


WB, [30] 
Indicates whether the selected cache level supports Write-Back. Permitted values are: 
) Write-Back is not supported. 
1 Write-Back is supported. 


For more information about encoding, see CCSIDR_ELI/ encodings on page B2-160. 


RA, [29] 
Indicates whether the selected cache level supports read-allocation. Permitted values are: 
@ Read-allocation is not supported. 
1 Read-allocation is supported. 


For more information about encoding, see CCSIDR_ELI encodings on page B2-160. 


WA, [28] 
Indicates whether the selected cache level supports write-allocation. Permitted values are: 
) Write-allocation is not supported. 
1 Write-allocation is supported. 


For more information about encoding, see CCSIDR_ELI encodings on page B2-160. 


NumSets, [27:13] 


(Number of sets in cache) - 1. Therefore, a value of 0 indicates one set in the cache. The number 
of sets does not have to be a power of 2. 


For more information about encoding, see CCS/DR_ELI encodings on page B2-160. 





100798 _0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights B2-159 


reserved. 
Non-Confidential 
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Associativity, [12:3] 


(Associativity of cache) - 1. Therefore, a value of 0 indicates an associativity of 1. The 
associativity does not have to be a power of 2. 


For more information about encoding, see CCSIDR_ELI encodings on page B2-160. 
LineSize, [2:0] 

(Log>(Number of bytes in cache line)) - 4. For example: 

Indicates the (logy (number of words in cache line)) - 2: 


For a line length of 16 bytes: Log2(16) = 4, LineSize entry = 0. This is the minimum 
line length. 


For a line length of 32 bytes: Log»(32) = 5, LineSize entry = 1. 


For more information about encoding, see CCS/DR_EL1 encodings on page B2-160. 


Configurations 
There are no configuration notes. 
Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


CCSIDR_EL1 encodings 
The following table shows the individual bit field and complete register encodings for the CCSIDR_ELI. 


Table B2-6 CCSIDR encodings 
















































































CSSELR Cache Size | Complete Register bit field encoding 
Level |InD eens WT | WB | RA| WA | NumSets | Associativity | LineSize 
ebeee Qbe L1 Data cache 64KB | 701FEQ1A (2) 1 1 1 OxOOFF 8xe03 2 
ebeee @b1 L1 Instruction 64KB | 201FEQ1A (2) (2) 1 (2) OxOOFF Q@x003 2 
cache 
@bee1 Qbe L2 cache 128KB | 701FEQ3A (2) 1 1 1 OxOOFF 8x007 2 
256KB | 783FE03A (2) 1 1 1 OxO1FF 0x07 2 
512KB | 707FEQ3A (2) 1 1 1 OxO3FF Qx007 2 
@bee01 @b1 Reserved - - = - 7 . = = u 
0be10 @be Reserved - - “ - 7 - “ * 7 
0be10 @b1 Reserved - - = - - = é 7 = 
@b@101 - @b1111 | Reserved - - - - - - - - - 
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B2.19 CLIDR_EL1, Cache Level ID Register, EL1 


The CLIDR_ELI identifies the type of cache, or caches, implemented at each level, up to a maximum of 
seven levels. 


It also identifies the Level of Coherency (LoC) and Level of Unification (LoU) for the cache hierarchy. 


Bit field descriptions 
CLIDR_ELI is a 64-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


63 3332, 3029 2726 2423 2120 9 8 6 5 3 2 0 
RESO 


Figure B2-15 CLIDR_EL1 bit assignments 

RESO, [63:33] 

RESO Reserved. 
ICB, [32:30] 

Inner cache boundary. This field indicates the boundary between the inner and the outer domain: 

@b@1@ L2 cache is the highest inner level. 

@b@11 L3 cache is the highest inner level. 
LoUU, [29:27] 

Indicates the Level of Unification Uniprocessor for the cache hierarchy: 


@beee No levels of cache need to cleaned or invalidated when cleaning or invalidating to the 
Point of Unification. This is the value if no caches are configured. 


LoC, [26:24] 
Indicates the Level of Coherency for the cache hierarchy: 


@be1@ ~L3 cache is not implemented. 
@b@11 L3 cache is implemented. 


LoUIS, [23:21] 
Indicates the Level of Unification Inner Shareable (LoUIS) for the cache hierarchy. 
@beee@ Nocache level needs cleaning to Point of Unification. 
RESO, [20:9] 
No cache at levels L7 down to L4. 
RESO Reserved. 
Ctype3, [8:6] 


Indicates the type of cache if the core implements L3 cache. If present, unified instruction and 
data caches at Level 3: 
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B2 AArch64 system registers 
B2.19 CLIDR_EL1, Cache Level ID Register, EL1 


@b10@ Both per-core L2 and cluster L3 caches are present. 

@beee = All other options. 

If Ctype2 has a value of @be@@, then the value of Ctype3 must be IGNorRED. 
Ctype2, [5:3] 

Indicates the type of unified instruction and data caches at Level 2: 

@b1ee@ Either per-core L2 or cluster L2 cache is present. 

@beee = All other options. 
Ctypel, [2:0] 

Indicates the type of cache implemented at L1: 


@b@11 Separate instruction and data caches at L1. 


Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2.20 CPACR_EL1, Architectural Feature Access Control Register, EL1 


The CPACR_ELI controls access to trace functionality and access to registers associated with Advanced 
SIMD and floating-point execution. 


Bit field descriptions 


CPACR_ ELI is a 32-bit register, and is part of the Other system control registers functional group. 


31 28 22 21 20 19 0 
L_TTA L_FPEN 
RESO 


Figure B2-16 CPACR_EL1 bit assignments 
RESO, [31:29] 
RESO Reserved. 
TTA, [28] 


Traps ELO and EL1 System register accesses to all implemented trace registers to EL1, from 
both Execution states. This bit is REso. The core does not provide System Register access to 
ETM control. 


Configurations 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2.21 CPTR_EL2, Architectural Feature Trap Register, EL2 


The CPTR_EL2 controls trapping to EL2 for accesses to CPACR, trace functionality and registers 
associated with Advanced SIMD and floating-point execution. It also controls EL2 access to this 
functionality. 


Bit field descriptions 


CPTR_EL2 is a 32-bit register, and is part of the Virtualization registers functional group. 


31 30 21 20 19 14131211 10 9 0 
LTCPAC LTTA LTFP 
RES1 
RESO 


Figure B2-17 CPTR_EL2 bit assignments 
TTA, [20] 


Trap Trace Access. 
This bit is not implemented. REso. 
Configurations 
RW fields in this register reset to UNKNOWN values. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv6, for Armv8-A architecture profile. 
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B2.22 CPTR_EL3, Architectural Feature Trap Register, EL3 


The CPTR_EL3 controls trapping to EL3 of access to CPACR_EL1, CPTR_EL2, trace functionality and 
registers associated with Advanced SIMD and floating-point execution. 


It also controls EL3 access to trace functionality and registers associated with Advanced SIMD and 
floating-point execution. 


Bit field descriptions 


CPTR_EL3 is a 32-bit register, and is part of the Security registers functional group. 
































31 30 21 20:19 1110 9 0 
_TTA 
_TCPAC 
_TFP 
RESO 


Figure B2-18 CPTR_EL3 bit assignments 
TTA, [20] 


Trap Trace Access. 
Not implemented. REso. 
TFP, [10] 


Traps all accesses to SVE, Advanced SIMD and floating-point functionality to EL3. This 
applies to all Exception levels, both Security states, and both Execution states. The possible 


values are: 
) Does not cause any instruction to be trapped. This is the reset value. 
1 Any attempt at any Exception level to execute an instruction that uses the registers that 


are associated with SVE, Advanced SIMD and floating-point is trapped to EL3, 
subject to the exception prioritization rules. 


Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2.23  CPUACTLR_EL1, CPU Auxiliary Control Register, EL1 


The CPUACTLR_EL] provides IMPLEMENTATION DEFINED configuration and control options for the core. 


Bit field descriptions 


CPUACTLR _ ELI is a 64-bit register, and is part of the IMPLEMENTATION DEFINED registers functional 
group. 


63 0 


Reserved 


Figure B2-19 CPUACTLR_EL1 bit assignments 
Reserved, [63:0] 
Reserved for Arm internal use. 


Configurations 


CPUACTLR_ELI is common to the Secure and Non-secure states. 


Usage constraints 
Accessing the CPUACTLR_EL1 


The CPU Auxiliary Control Register can be written only when the system is idle. Arm 
recommends that you write to this register after a powerup reset, before the MMU is enabled. 


Setting many of these bits can cause significantly lower performance on your code. Therefore, 
Arm strongly recommends that you do not modify this register unless directed by Arm. 


This register is accessible as follows: 

This register can be read with the MRS instruction using the following syntax: 
MRS <Xt>,<systemreg> 

This register can be written with the MSR instruction using the following syntax: 
MSR <systemreg>, <Xt> 


This syntax is encoded with the following settings in the instruction encoding: 





<systemreg> | op0{|op1|CRn|CRm | op2 





$3_0_C15_C1_0]11 | 000 | 1111 | 0001 | 000 























Accessibility 


This register is accessible in software as follows: 

















<systemreg> Control Accessibility 

E2H |TGE |NS ELO |EL1 |EL2 |EL3 
$3.0 C15 CLO x x 0 - RW |n/a |RW 
$3_0_C15_ Cl_0 x 0 1 - RW RW RW 
$3_0_C15_ Cl_0 x 1 1 - n/a RW RW 
































'n/a' Not accessible. The core cannot be executing at this Exception level, so this access is not possible. 
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B2 AArch64 system registers 
B2.23 CPUACTLR_EL1, CPU Auxiliary Control Register, EL1 


Traps and enables 


For a description of the prioritization of any generated exceptions, see Synchronous exception 
prioritization in the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture 


profile. 
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B2.24 CPUACTLR2_EL1, CPU Auxiliary Control Register 2, EL1 


The CPUACTLR2_EL1 provides IMPLEMENTATION DEFINED configuration and control options for the core. 


Bit field descriptions 


CPUACTLR2_ ELI is a 64-bit register, and is part of the IMPLEMENTATION DEFINED registers functional 
group. 


63 0 


Reserved 


Figure B2-20 CPUACTLR2_EL1 bit assignments 


Reserved, [63:0] 
Reserved for Arm internal use. 


Configurations 


CPUACTLR2_ EL] is common to the Secure and Non-secure states. 


Usage constraints 
Accessing the CPUACTLR2_EL1 


The CPUACTLR2_ ELI can be written only when the system is idle. Arm recommends that you 
write to this register after a powerup reset, before the MMU is enabled. 


Setting many of these bits can cause significantly lower performance on your code. Therefore, 
Arm strongly recommends that you do not modify this register unless directed by Arm. 


This register can be read using MRS with the following syntax: 
MRS <Xt>,<systemreg> 

This register can be written using MSR with the following syntax: 
MSR <systemreg>, <Xt> 


This syntax is encoded with the following settings in the instruction encoding: 





<systemreg> |Op0)|CRn | Op1 | CRm | Op2 























$3_0_C15_Cl_1}3 clS |0 cl 1 





Accessibility 


This register is accessible in software as follows: 


<syntax> Control Accessibility 





E2H |TGE |NS ELO |EL1 |EL2 |EL3 






































$3_0_C15_ Cl 1 X x 0 - RW n/a RW 
$3.0. C15 Cl 1 Xx 0 1 - RW RW RW 
$3.0. C15 Cl 1 Xx 1 1 - n/a RW RW 





'n/a' Not accessible. The PE cannot be executing at this Exception level, so this access is not possible. 
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B2.24 CPUACTLR2_EL1, CPU Auxiliary Control Register 2, EL1 


Traps and enables 
For a description of the prioritization of any generated exceptions, see Exception priority order 
in the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile for 
exceptions taken to AArch64 state, and see Synchronous exception prioritization for exceptions 
taken to AArch64 state. 


Write access to this register from EL1 or EL2 depends on the value of bit[0] of ACTLR_EL2 and 
ACTLR_EL3. 
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B2.25 CPUACTLR3_EL1, CPU Auxiliary Control Register 3, EL1 


The CPUACTLR3_EL1 provides IMPLEMENTATION DEFINED configuration and control options for the core. 


Bit field descriptions 


CPUACTLR3_ ELI is a 64-bit register, and is part of the IMPLEMENTATION DEFINED registers functional 
group. 


63 0 


Reserved 


Figure B2-21 CPUACTLR3_EL1 bit assignments 


Reserved, [63:0] 
Reserved for Arm internal use. 


Configurations 


CPUACTLR3_EL1 is common to the Secure and Non-secure states. 


Usage constraints 
Accessing the CPUACTLR3_EL1 


The CPUACTLR3_ELI can be written only when the system is idle. Arm recommends that you 
write to this register after a powerup reset, before the MMU is enabled. 


Setting many of these bits can cause significantly lower performance on your code. Therefore, 
Arm strongly recommends that you do not modify this register unless directed by Arm. 


This register can be read using MRS with the following syntax: 
MRS <Xt>,<systemreg> 

This register can be written using MSR with the following syntax: 
MSR <systemreg>, <Xt> 


This syntax is encoded with the following settings in the instruction encoding: 





<systemreg> |Op0|CRn | Op1 | CRm | Op2 























$3_0_C15_Cl 2 }3 clS |0 cl 2 





Accessibility 


This register is accessible in software as follows: 


<syntax> Control Accessibility 





E2H |TGE |NS ELO |EL1 |EL2 |EL3 






































$3_0_C15_Cl 2 X x 0 - RW n/a RW 
$3_0_C15_Cl 2 Xx 0 1 - RW RW RW 
$3_0_C15_Cl_ 2 Xx 1 1 - n/a RW RW 





'n/a' Not accessible. The PE cannot be executing at this Exception level, so this access is not possible. 
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Traps and enables 
For a description of the prioritization of any generated exceptions, see Exception priority order 
in the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile for 
exceptions taken to AArch64 state, and see Synchronous exception prioritization for exceptions 
taken to AArch64 state. 


Write access to this register from EL1 or EL2 depends on the value of bit[0] of ACTLR_EL2 and 
ACTLR_EL3. 
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CPUCFR_EL1, CPU Configuration Register, EL1 


The CPUCFR_ELI provides configuration information for the core. 


Bit field descriptions 
CPUCFR_ELI is a 32-bit register, and is part of the IMPLEMENTATION DEFINED registers functional group. 


This register is Read Only. 


Figure B2-22 CPUCFR_EL1 bit assignments 


RESO, [31:2] 
Reserved, RESO. 
ECC, [1:0] 
Indicates whether ECC is present or not. The possible values are: 
ee ECC is not present. 
Q1 ECC is present. 
Configurations 


There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


Usage constraints 
Accessing the CPUCFR_EL1 
This register can be read with the MRS instruction using the following syntax: 
MRS <Xt>,<systemreg> 
To access the CPUCFR_ELI: 


MRS <Xt>, CPUCFR_EL1 ; Read CPUCFR_EL1 into Xt 


This syntax is encoded with the following settings in the instruction encoding: 





<systemreg> | op0j|op1|CRn|CRm | op2 





$3.0. C15 C00} 11 | 000 | 1111 | 0000 | 000 























Accessibility 


This register is accessible in software as follows: 
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B2.26 CPUCFR_EL1, CPU Configuration Register, EL1 






































<systemreg> Control Accessibility 

E2H |TGE |NS ELO |EL1 |EL2 |EL3 
S30 C15 C00 x x 0 Z RO |n/fa_ |RO 
S30 C15 C00 x 0 1 - RO |RO [RO 
S30 C15 C00 x 1 1 2 nia |RO |RO 











‘n/a' Not accessible. The PE cannot be executing at this Exception level, so this access is not possible. 
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B2.27. CPUECTLR_EL1, CPU Extended Control Register, EL1 


The CPUECTLR_EL]I provides additional IMPLEMENTATION DEFINED configuration and control options for 
the core. 


Bit field descriptions 
CPUECTLR_ ELI is a 64-bit register, and is part of the 64-bit registers functional group. 


This register resets to value @x@000000961563000. 


63 62 61 60.59 58 57 56.55 54 53 52:51 50 49 48.47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 























MXP_EN— L_ATOMIC_ACQ_NEAR 
MXP_TP a 
MXP_ATHR CA_EVICT_DIS 
MM_VMID_THR CA_UCLEAN_EVICT_EN 
MM_ASP_EN 
MM_CH_DIS PFT_IF 
MM_TLBPF_DIS PFT_LS 
PFT_MM 
HPA_MODE — 
HPA_CAP |_12 FLUSH 
HPA_L1_DIS 
HPA_DIS 





31 30 29 28 27 26 25 24 23 22 21 20.19 18 17 16.15 14 13 12 11 9876543210 

















ATOMIC_ST_NEAR—! | L_EXTLLC 
ATOMIC_REL_NEAR RPF_PHIT_EN 
ATOMIC_LD_NEAR RPF_LO_CONF 
RPF_DIS 
TLD_PRED_DIS 
DTLB_CABT_EN 
PF_STS_DIS 

WS_THR_L2—— L___pF_STI_DIS 

WS THR L3 L_pF_SS L2 DIST 

WS_THR_L4 PF_DIS 











WS_THR_DRAM 
WS_THR_DCZVA 








RESO 


Figure B2-23 CPUECTLR_EL1 bit assignments 
RESO, [63:62] 


RESO Reserved. 


MXP_EN, [61] 
Max-power throttle enable. The possible values are: 


7) Disables max-power throttling mechanism. This is the reset value. 
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B2.27 CPUECTLR_EL1, CPU Extended Control Register, EL1 
1 Enables max-power throttling mechanism. 
Note 


Both the MXP_EN bit and the MPMMEN input pin at the DSU cluster level must be 
asserted to enable the max-power throttling mechanism. 








RESO, [60:59] 


RESO Reserved. 


MXP._TP, [58:57] 


Percentage of throttling in the Load-Store and Vector Execute units during the period when 
throttling has been triggered and is active. The possible values are: 


ee Throttle by 60%. This is the reset value. 
e1 Throttle by 50%. 
10 Throttle by 40%. 
11 Throttle by 30%. 


MXP_ATHR, [56:55] 


Peak activity threshold at which max-power throttling is triggered. The possible values are: 


ee Max-power throttling triggered at 70% of peak activity. This is the reset value. 
e1 Max-power throttling triggered at 60% of peak activity. 
10 Max-power throttling triggered at 50% of peak activity. 
11 Max-power throttling triggered at 40% of peak activity. 


MM_VMID_THR, [54] 
VMID filter threshold. The possible values are: 


7) Flush VMID filter after 16 unique VMID allocations to the MMU Translation Cache. 
This is the reset value. 
1 Flush VMID filter after 32 unique VMID allocations to the MMU Translation Cache. 


MM_ASP._EN, [53] 
Disables allocation of splintered pages in L2 TLB. The possible values are: 
7) Enables allocation of splintered pages in the L2 TLB. This is the reset value. 
1 Disables allocation of splintered pages in the L2 TLB. 
MM_CH_DIS, [52] 
Disables use of contiguous hint. The possible values are: 
@ Enables use of contiguous hint. This is the reset value. 
1 Disables use of contiguous hint. 
MM_TLBPF_DIS, [51] 
Disables L2 TLB prefetcher. The possible values are: 
7) Enables L2 TLB prefetcher. This is the reset value. 
1 Disables L2 TLB prefetcher. 
HPA_MODE, [50:49] 
Hardware Page Aggregation (HPA) mode. The possible values are: 
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ee Moderately conservative hardware page aggregation. This is the reset value. 
e1 Aggressive hardware page aggregation. 

10 Moderately aggressive hardware page aggregation. 

11 Conservative hardware page aggregation. 


HPA_CAP, [48] 
Limited or full hardware page aggregation selection . The possible values are: 
@ Limited hardware page aggregation. This is the reset value. 
1 Full hardware page aggregation. 
HPA_L1_DIS, [47] 
Disables HPA in L1 TLBs (but continues to use HPA in L2 TLB). The possible values are: 
7) Enables hardware page aggregation in LI! TLBs. This is the reset value. 
1 Disables hardware page aggregation in LI TLBs. 
HPA_DIS, [46] 
Disables hardware page aggregation. The possible values are: 
@ Enables hardware page aggregation. This is the reset value. 
1 Disables hardware page aggregation. 
RESO, [45:44] 
RESO Reserved. 
L2_FLUSH, [43] 


Allocation behavior of copybacks caused by L2 cache hardware flush and DC CISW 
instructions targeting the L2 cache. If it is known that data is likely to be used soon by another 
core, setting this bit can improve system performance. The possible values are: 


) L2 cache flushes and invalidates by set/way do not allocate in the L3 cache. Cache 
lines in the UniqueDirty state cause WriteBack transactions with the allocation hint 
cleared, while cache lines in UniqueClean or SharedClean states cause address-only 
Evict transactions. This is the reset value. 


1 L2 cache flushes by set/way allocate in the L3 cache. Cache lines in the UniqueDirty 
or UniqueClean state cause WriteBackFull or WriteEvictFull transactions, 
respectively, both with the allocation hint set. Cache lines in the SharedClean state 
cause address-only Evict transactions. 


RESO, [42] 
RESO Reserved. 
PFT_MM, [41:40] 


DRAM prefetch using PrefetchT gt transactions for table walk requests. The possible values are: 


ee Disable prefetchtgt generation for requests from the Memory Management unit 
(MMU). This is the reset value. 
e1 Conservatively generate prefetchtgt for cacheable requests from the MMU, always 


generate for non-cacheable. 


10 Aggressively generate prefetchtgt for cacheable requests from the MMU, always 
generate for non-cacheable. 


11 Always generate prefetchtgt for cacheable requests from the MMU, always generate 
for non-cacheable. 
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PFT_LS, [39:38] 


DRAM prefetch using PrefetchTgt transactions for load and store requests. The possible values 


are: 

ee Disable prefetchtgt generation for requests from the Load-Store unit (LS). This is the 
reset value. 

e1 Conservatively generate prefetchtgt for cacheable requests from the LS, always 
generate for non-cacheable. 

10 Aggressively generate prefetchtgt for cacheable requests from the LS, always generate 
for non-cacheable. 

11 Always generate prefetchtgt for cacheable requests from the LS, always generate for 


non-cacheable. 


PFT_IF, [37:36] 


DRAM prefetch using PrefetchTgt transactions for instruction fetch requests. The possible 
values are: 


ee Disable prefetchtgt generation for requests from the Instruction Fetch unit (IF). This is 
the reset value. 


e1 Conservatively generate prefetchtgt for cacheable requests from the IF, always 
generate for non-cacheable. 


10 Aggressively generate prefetchtgt for cacheable requests from the IF, always generate 
for non-cacheable. 


11 Always generate prefetchtgt for cacheable requests from the IF, always generate for 
non-cacheable. 


CA_UCLEAN_EVICT_EN, [35] 


Enables sending WriteEvict transactions on the CPU CHI interface for UniqueClean evictions. 
WriteEvict transactions update downstream caches. Enable WriteEvict transactions only if there 
is an additional level of cache below the CPU's Level 2 cache. The possible values are: 

7) Disables sending data with UniqueClean evictions. 


1 Enables sending data with UniqueClean evictions. This is the reset value. 


CA_EVICT_DIS, [34] 


Disables sending of Evict transactions on the CPU CHI interface for clean cache lines that are 
evicted from the core. Evict transactions are required only if the system contains a snoop filter 
that requires notification when the core evicts the cache line. The possible values are: 


7) Enables sending Evict transactions. This is the reset value. 
1 Disables sending Evict transactions. 
RESO, [33] 


RESO Reserved. 


ATOMIC_ACQ NEAR, [32] 


An atomic instruction to WB memory with acquire semantics that does not hit in the cache in 
Exclusive state, may make up to one fill request. The possible values are: 


7) Acquire-atomic is near if cache line is already Exclusive, otherwise make far atomic 
request. 
1 Acquire-atomic will make up to 1 fill request to perform near. This is the reset value. 


ATOMIC _ST_NEAR, [31] 
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A store atomic instruction to WB memory that does not hit in the cache in Exclusive state, may 
make up to one fill request. The possible values are: 


7) Store-atomic is near if cache line is already Exclusive, otherwise make far atomic 
request. This is the reset value. 


1 Store-atomic will make up to 1 fill request to perform near. 


ATOMIC_REL NEAR, [30] 


An atomic instruction to WB memory with release semantics that does not hit in the cache in 
Exclusive state, may make up to one fill request. The possible values are: 


2) Release-atomic is near if cache line is already Exclusive, otherwise make far atomic 
request. 
1 Release-atomic will make up to 1 fill request to perform near. This is the reset value. 


ATOMIC_LD_ NEAR, [29] 


A load atomic (including SWP and CAS) instruction to WB memory that does not hit in the 
cache in Exclusive state, may make up to one fill request. The possible values are: 


7) Load-atomic is near if cache line is already Exclusive, otherwise make far atomic 
request. 
1 Load-atomic will make up to 1 fill request to perform near. This is the reset value. 


TLD_PRED_DIS, [28] 


Disables Transient Load Prediction. The possible values are: 


7) Enables transient load prediction. This is the reset value. 
1 Disables transient load prediction. 
RESO, [27] 


RESO Reserved. 
DTLB_CABT_EN, [26] 
Enables TLB Conflict Data Abort Exception. The possible values are: 


) Disables TLB conflict data abort exception. This is the reset value. 
1 Enables TLB conflict data abort exception. 


WS_THR_L2, [25:24] 


Threshold for direct stream to L2 cache on store. The possible values are: 


ee 256B. 

e1 4KB. This is the reset value. 

10 8KB. 

11 Disables direct stream to L2 cache on store. 


WS_THR _L3, [23:22] 


Threshold for direct stream to L3 cache on store. The possible values are: 


ee 768B. 

e1 16KB. This is the reset value. 

10 32KB. 

11 Disables direct stream to L3 cache on store. 


WS_THR _L4, [21:20] 
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Threshold for direct stream to L4 cache on store. The possible values are: 


ee 16KB. 

e1 64KB. This is the reset value. 

10 128KB. 

11 Disables direct stream to L4 cache on store. 


WS_THR_DRAM, [19:18] 


Threshold for direct stream to DRAM on store. The possible values are: 


Js) 64KB. 

@1 1MB, for memory designated as outer-allocate. This is the reset value. 
10 1MB, allocating irrespective of outer-allocation designation. 

11 Disables direct stream to DRAM on store. 


WS_THR_DCZVA, [17] 
Have DCZVA use a lower WS_THR_L2 configuration. The possible values are: 


() DCZVA behaves like normal store wrt WS_THR_L2. 
1 DCZVA will use one lower stream threshold from WS_THR_L2. This is the reset 
value. 
RESO, [16] 


RESO Reserved. 
PF_DIS, [15] 


Disables data-side hardware prefetching. The possible values are: 


) Enables hardware prefetching. This is the reset value. 
1 Disables hardware prefetching. 
RESO, [14] 


RESO Reserved. 
PF_SS_L2_DIST, [13:12] 


Single cache line stride prefetching L2 distance. The possible values are: 


ee 22 
@1 28 
10 34 
11 40. This is the reset value. 


RESO, [11:10] 


RESO Reserved. 
RESO, [9] 
RESO Reserved. 
PF_STL_DIS, [8] 
Disables store prefetches at issue (not overridden by CPUECTLR_EL1[15]). The possible 





values are: 
@ Enables store prefetching. This is the reset value. 
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1 Disables store prefetching. 


PF_STS_DIS, [7] 


Disables store-stride prefetches. The possible values are: 


) Enables store prefetching. This is the reset value. 
1 Disables store prefetching. 
RESO, [6] 


RESO Reserved. 
RPF_DIS, [5] 
Disables region prefetcher. The possible values are: 
@ Enables region prefetching. This is the reset value. 


1 Disables region prefetching. 


RPF_LO_CONE, [4] 


Region prefetcher training behavior. The possible values are: 


@ Limited training for region prefetcher on single accesses. This is the reset value. 
1 Always train the region prefetcher on single accesses, which results in fewer prefetch 
requests. 


RPF_PHIT_EN, [3] 


Enable region prefetcher propagation on hit. The possible values are: 


7) Disables region prefetcher propagation on hit. This is the reset value. 
1 Enables region prefetcher propagation on hit. 
RESO, [2:1] 


RESO Reserved. 


EXTLLC, [0] 
Internal or external Last-level cache (LLC) in the system. The possible values are: 


7) Indicates that an internal Last-level cache is present in the system, and that the 
DataSource field on the master CHI interface indicates when data is returned from the 
LLC. This is used to control how the LL_CACHE* PMU events count. This is the 
reset value. 


1 Indicates that an external Last-level cache is present in the system, and that the 
DataSource field on the master CHI interface indicates when data is returned from the 
LLC. This is used to control how the LL_CACHE* PMU events count. 


Configurations 


This register has no configuration options. 
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Accessing the CPUECTLR_EL1 


B2 AArch64 system registers 


The CPU Extended Control Register can be written only when the system is idle. Arm 
recommends that you write to this register after a powerup reset, before the MMU is enabled. 


This register can be read using MRS with the following syntax: 


MRS <Xt>,<systemreg> 


This register can be written using MSR with the following syntax: 


MSR <systemreg>, <Xt> 


This syntax is encoded with the following settings in the instruction encoding: 


Accessibility 


B2.27 CPUECTLR_EL1, CPU Extended Control Register, EL1 












































<systemreg> op0 | op1 | CRn | CRm | op2 
CPUECTLR_EL1}11 | 000 | 1111 | 0001 | 100 
This register is accessible in software as follows: 
<systemreg> Control Accessibility 
E2H |TGE |NS ELO |EL1 |EL2 |EL3 
CPUECTLR_EL1 x x 0 - RW n/a RW 
CPUECTLR_EL1 x 0 1 - RW RW RW 
CPUECTLR_EL1 x 1 1 - n/a RW RW 
































‘n/a' Not accessible. The PE cannot be executing at this Exception level, so this access is not possible. 


Traps and enables 


For a description of the prioritization of any generated exceptions, see Synchronous exception 
prioritization in the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture 
profile for exceptions taken to AArch64 state. 


Access to this register depends on bit[1] of ACTLR_EL2 and ACTLR_EL3. 
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B2.28 CPUPCR_EL3, CPU Private Control Register, EL3 


The CPUPCR_EL3 provides IMPLEMENTATION DEFINED configuration and control options for the core. 


Bit field descriptions 


CPUPCR_EL3 is a 64-bit register, and is part of the IMPLEMENTATION DEFINED registers functional group. 


63 0 


Reserved 


Figure B2-24 CPUPCR_EL3 bit assignments 
Reserved, [63:0] 


Reserved for Arm internal use. 


Configurations 
CPUPCR_EL3 is only accessible in Secure state. 


Usage constraints 
Accessing the CPUPCR_EL3 


The CPUPCR_EL3 can be written only when the system is idle. Arm recommends that you 
write to this register after a powerup reset, before the MMU is enabled. 


Writing to this register might cause UNPREDICTABLE behaviors. Therefore, Arm strongly 
recommends that you do not modify this register unless directed by Arm. 


This register is accessible as follows: 

This register can be read with the MRS instruction using the following syntax: 
MRS <Xt>,<systemreg> 

This register can be written with the MSR instruction using the following syntax: 
MSR <systemreg>, <Xt> 


This syntax is encoded with the following settings in the instruction encoding: 





<systemreg> | op0 | op1 | CRn | CRm | op2 























$3.6 C15 8 1]11 |110 }1111 | 1000 | 001 





Accessibility 


This register is accessible in software as follows: 

















<systemreg> Control Accessibility 

E2H |TGE |NS ELO |EL1 |EL2 |EL3 
S36 C15 8 1 x x 0 é : nia | RW 
S36 C15 8 1 x 0 1 2 - : RW 
S36 C15 8 1 x 1 1 2 na i- RW 
































‘n/a' Not accessible. The core cannot be executing at this Exception level, so this access is not possible. 
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Traps and enables 


For a description of the prioritization of any generated exceptions, see Synchronous exception 
prioritization in the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture 


profile. 
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B2.29 CPUPMR_EL3, CPU Private Mask Register, EL3 


The CPUPMR_EL3 provides IMPLEMENTATION DEFINED configuration and control options for the core. 


Bit field descriptions 


CPUPMR EL3 is a 64-bit register, and is part of the IMPLEMENTATION DEFINED registers functional group. 


63 0 


Reserved 


Figure B2-25 CPUPMR_EL3 bit assignments 
Reserved, [63:0] 


Reserved for Arm internal use. 


Configurations 
CPUPMR _EL3 is only accessible in Secure state. 


Usage constraints 
Accessing the CPUPMR_EL3 


The CPUPMR_ EL3 can be written only when the system is idle. Arm recommends that you 
write to this register after a powerup reset, before the MMU is enabled. 


Writing to this register might cause UNPREDICTABLE behaviors. Therefore, Arm strongly 
recommends that you do not modify this register unless directed by Arm. 


This register is accessible as follows: 

This register can be read with the MRS instruction using the following syntax: 
MRS <Xt>,<systemreg> 

This register can be written with the MSR instruction using the following syntax: 
MSR <systemreg>, <Xt> 


This syntax is encoded with the following settings in the instruction encoding: 





<systemreg> | op0 | op1 | CRn | CRm | op2 























S3_6 C15 8 3] 11 |110 }1111 | 1000 | 011 





Accessibility 


This register is accessible in software as follows: 

















<systemreg> Control Accessibility 

E2H |TGE |NS ELO |EL1 |EL2 |EL3 
S36 C15 8 3 x x 0 é : nia | RW 
S36 C15 8 3 x 0 1 2 - : RW 
S36 C15 8 3 x 1 1 2 na i- RW 
































‘n/a' Not accessible. The core cannot be executing at this Exception level, so this access is not possible. 
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Traps and enables 


For a description of the prioritization of any generated exceptions, see Synchronous exception 
prioritization in the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture 


profile. 
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B2.30 CPUPOR_EL3, CPU Private Operation Register, EL3 


The CPUPOR_EL3 provides IMPLEMENTATION DEFINED configuration and control options for the core. 


Bit field descriptions 


CPUPOR EL3 is a 64-bit register, and is part of the IMPLEMENTATION DEFINED registers functional group. 


63 0 


Reserved 


Figure B2-26 CPUPOR_EL3 bit assignments 
Reserved, [63:0] 


Reserved for Arm internal use. 


Configurations 
CPUPOR EL3 is only accessible in Secure state. 


Usage constraints 
Accessing the CPUPOR_EL3 


The CPUPOR _EL3 can be written only when the system is idle. Arm recommends that you 
write to this register after a powerup reset, before the MMU is enabled. 


Writing to this register might cause UNPREDICTABLE behaviors. Therefore, Arm strongly 
recommends that you do not modify this register unless directed by Arm. 


This register is accessible as follows: 

This register can be read with the MRS instruction using the following syntax: 
MRS <Xt>,<systemreg> 

This register can be written with the MSR instruction using the following syntax: 
MSR <systemreg>, <Xt> 


This syntax is encoded with the following settings in the instruction encoding: 





<systemreg> | op0 | op1 | CRn | CRm | op2 























$3.6 C15 8 2]11 |110 }1111 | 1000 | 010 





Accessibility 


This register is accessible in software as follows: 

















<systemreg> Control Accessibility 

E2H |TGE |NS ELO |EL1 |EL2 |EL3 
S36 C15 8 2 x x 0 é : nia |RW 
S36 C15 8 2 x 0 1 2 - : RW 
S36 C15 8 2 x 1 1 2 na i- RW 
































‘n/a' Not accessible. The core cannot be executing at this Exception level, so this access is not possible. 
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Traps and enables 


For a description of the prioritization of any generated exceptions, see Synchronous exception 
prioritization in the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture 


profile. 
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B2.31 CPUPSELR_EL3, CPU Private Selection Register, EL3 


The CPUPSELR_EL3 provides IMPLEMENTATION DEFINED configuration and control options for the core. 


Bit field descriptions 


CPUPSELR_EL3 is a 32-bit register, and is part of the IMPLEMENTATION DEFINED registers functional group. 


31 0 


Figure B2-27 CPUPSELR_EL3 bit assignments 
Reserved, [31:0] 


Reserved for Arm internal use. 


Configurations 
CPUPSELR_EL3 is only accessible in Secure state. 


Usage constraints 
Accessing the CPUPSELR_EL3 


The CPUPSELR_EL3 can be written only when the system is idle. Arm recommends that you 
write to this register after a powerup reset, before the MMU is enabled. 


Writing to this register might cause UNPREDICTABLE behaviors. Therefore, Arm strongly 
recommends that you do not modify this register unless directed by Arm. 


This register is accessible as follows: 

This register can be read with the MRS instruction using the following syntax: 
MRS <Xt>,<systemreg> 

This register can be written with the MSR instruction using the following syntax: 
MSR <systemreg>, <Xt> 


This syntax is encoded with the following settings in the instruction encoding: 





<systemreg> | op0 | op1 | CRn | CRm | op2 





$3.6 C15 8 Of 11 |110 }1111 | 1000 | 000 























Accessibility 


This register is accessible in software as follows: 





<systemreg> Control Accessibility 


E2H |TGE |NS ELO |EL1 |EL2 |EL3 














S36 C15 8 0 x x 0 z : nia |RW 
$3.6 C15 80 x 0 1 : : RW 
S36 C15 8 0 x 1 1 : na |- RW 
































‘n/a' Not accessible. The core cannot be executing at this Exception level, so this access is not possible. 
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Traps and enables 


For a description of the prioritization of any generated exceptions, see Synchronous exception 
prioritization in the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture 


profile. 
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B2.32 CPUPWRCTLR_EL1, Power Control Register, EL1 
The CPUPWRCTLR_ELI provides information about power control support for the core. 


Bit field descriptions 


CPUPWRCTLR_ ELI is a 32-bit register, and is part of the IMPLEMENTATION DEFINED registers functional 
group. 


31 10 9 7 6 4 3 10 


WFE_RET_CTRL a | 
WFI_RET_CTRL 


CORE_PWRDN_EN 
RESO = = 


Figure B2-28 CPUPWRCTLR_EL1 bit assignments 
RESO, [31:10] 
RESO Reserved. 
WFE_RET_CTRL, [9:7] 
CPU WFE retention control: 


eee Disable the retention circuit. This is the default value, see Zable B2-7 CPUPWRCTLR 
Retention Control Field on page B2-190 for more retention control options. 


WFL RET_CTRL, [6:4] 
CPU WFI retention control: 


eee Disable the retention circuit. This is the default value, see Table B2-7 CPUPWRCTLR 
Retention Control Field on page B2-190 for more retention control options. 


RESO, [3:1] 
RESO Reserved. 
CORE_PWRDN EN, [0] 


Indicates to the power controller using PACTIVE if the core wants to power down when it 
enters WFI state. 


7) No power down requested. This is the reset value. 


1 A power down is requested. 


Table B2-7 CPUPWRCTLR Retention Control Field 





Encoding | Number of counter ticks‘ | \jinimum retention entry delay 


(System counter at 50MHz-10MHz) 





eee Disable the retention circuit | Default Condition. 








e001 2 40ns-200ns 

















© The number of system counter ticks required before the core signals retention readiness on PACTIVE to the power controller. The core does not accept a retention 


entry request until this time. 
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Table B2-7 CPUPWRCTLR Retention Control Field (continued) 





Encoding | Number of counter ticks‘ 


Minimum retention entry delay 


(System counter at 50MHz-10MHz) 





160ns-800ns 





640ns — 3,200ns 





1,280ns-6,400ns 





2,560ns-12,800ns 





5,120ns-25,600ns 





010 8 
Q11 32 
100 64 
101 128 
110 256 
111 512 











10,240ns-51,200ns 








Configurations 


There are no configuration notes. 


Usage constraints 
Accessing the CPUPWRCTLR ELI 


This register can be read using MRS with the following syntax: 


MRS <Xt>,<systemreg> 


This register can be written using MSR with the following syntax: 


MSR <systemreg>, <Xt> 


This syntax is encoded with the following settings in the instruction encoding: 












































<systemreg> | op0|op1|CRn|CRm | op2 
$3.0. C15 C27} 11 |000 | 1111 |0010 | 111 
Accessibility 
This register is accessible in software as follows: 
<systemreg> Control Accessibility 
E2H |TGE |NS ELO |EL1 |EL2 |EL3 

$3.0 C15 C27 x x 0 - RW |n/a |RW 
$3.0 C15 C27 x 0 1 7 RW |RW |RW 
$3.0 C15 C27 x 1 1 7 nia |RW |RW 
































‘n/a' Not accessible. The PE cannot be executing at this Exception level, so this access is not possible. 


Traps and enables 


For a description of the prioritization of any generated exceptions, see Synchronous exception 
prioritization in the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture 
profile for exceptions taken to AArch64 state. 


Write access to this register from EL1 or EL2 depends on the value of bit[7] of ACTLR_EL2 


and ACTLR_EL3. 





© The number of system counter ticks required before the core signals retention readiness on PACTIVE to the power controller. The core does not accept a retention 


entry request until this time. 
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B2.33  CSSELR_EL1, Cache Size Selection Register, EL1 
CSSELR_EL] selects the current Cache Size ID Register (CCSIDR_EL1), by specifying: 


¢ The required cache level. 
¢ The cache type, either instruction or data cache. 


For details of the CCSIDR_EL1, see B2./8 CCSIDR_EL1, Cache Size ID Register, ELI on page B2-159. 


Bit field descriptions 


CSSELR_ ELI is a 32-bit register, and is part of the Identification registers functional group. 


31 4 3 10 


inp! 


RESO 


Figure B2-29 CSSELR_EL1 bit assignments 
[31:4] 
RESO Reserved. 
Level, [3:1] 


Cache level of required cache: 


800 Ll. 
001 L2. 
010 L3, if present. 


The combination of Level=001 and InD=1 is reserved. 


The combinations of Level and InD for 100 to 1111 are reserved. 


InD, [0] 
Instruction not Data bit: 
) Data or unified cache. 
1 Instruction cache. 


The combination of Level=001 and InD=1 is reserved. 
The combinations of Level and InD for 0100 to 1111 are reserved. 
Configurations 


If a cache level is missing but CSSELR_ELI selects this level, then a CCSIDR_ELI read 
returns an UNKNOWN value. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2.34 CTR_ELO, Cache Type Register, ELO 
The CTR_ELO provides information about the architecture of the caches. 
Bit field descriptions 


CTR_ELO is a 32-bit register, and is part of the Identification registers functional group. 


This register is Read Only. 


31 3029 28 27 24 23 20 19 16 15 14 13 4 3 0 





RES1 
RESO 
Figure B2-30 CTR_ELO bit assignments 
RES1, [31] 
RES1 Reserved. 


RESO, [30:29] 
RESO Reserved. 
IDC, [28] 
Data cache clean requirements for instruction to data coherence: 


7) Data cache clean to the point of unification is required for instruction to data 
coherence, unless CLIDR_EL1.LoC == 0b000 or (CLIDR_EL1.LoUIS == 0b000 && 
CLIDR_EL1.LoUU == 0b000). . 


1 Data cache clean to the point of unification is not required for instruction to data 
coherence. 


IDC reflects the inverse value of the BROADCASTCACHEMAINTPOU pin. 
CWG, [27:24] 


Cache write-back granule. Log, of the number of words of the maximum size of memory that 
can be overwritten as a result of the eviction of a cache entry that has had a memory location in 
it modified: 


@10@ Cache write-back granule size is 16 words. 


ERG, [23:20] 


Exclusives Reservation Granule. Log, of the number of words of the maximum size of the 
reservation granule that has been implemented for the Load-Exclusive and Store-Exclusive 
instructions: 


e10@ ~—Exclusive reservation granule size is 16 words. 


DminLine, [19:16] 


Log) of the number of words in the smallest cache line of all the data and unified caches that the 
core controls: 


e100 Smallest data cache line size is 16 words. 
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L1Ip, [15:14] 
Instruction cache policy. Indicates the indexing and tagging policy for the L1 Instruction cache: 


11 Physically Indexed Physically Tagged (PIPT). 


RESO, [13:4] 
RESO Reserved. 
IminLine, [3:0] 


Log, of the number of words in the smallest cache line of all the instruction caches that the core 
controls. 


e100 Smallest instruction cache line size is 16 words. 


Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2.35 DCZID_ELO, Data Cache Zero ID Register, ELO 


The DCZID_ELO indicates the block size written with byte values of zero by the DC ZVA (Data Cache 
Zero by Address) system instruction. 


Bit field descriptions 
DCZID_ELO is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


31 5 4:3 0 
pbzP— 
RESO 


Figure B2-31 DCZID_ELO bit assignments 
RESO, [31:5] 
RESO Reserved. 
BlockSize, [3:0] 
Log) of the block size in words: 


e100 = The block size is 16 words. 


Configurations 
There are no configuration notes. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé6, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.36 DISR_EL1, Deferred Interrupt Status Register, EL1 


B2.36 DISR_EL1, Deferred Interrupt Status Register, EL1 
The DISR_EL! records the SError interrupts consumed by an ESB instruction. 


Bit field descriptions 


DISR_ELI is a 64-bit register, and is part of the registers Reliability, Availability, Serviceability (RAS) 
functional group. 











1 30 25 24 23 Eg 10 j Za 
RESO 
Figure B2-32 DISR_EL1 bit assignments, DISR_EL1.IDS is 0 
RESO, [63:32] 
Reserved, RESO. 
A, [31] 
Set to | when ESB defers an asynchronous SError interrupt. If the implementation does not 
include any synchronizable sources of SError interrupt, this bit is RESO. 
RESO, [30:25] 
Reserved, RESO. 
IDS, [24] 
Indicates the type of format the deferred SError interrupt uses. The value of this bit is: 
@ Deferred error uses architecturally-defined format. 
RESO, [23:13] 
Reserved, RESO. 
AET, [12:10] 
Asynchronous Error Type. Describes the state of the core after taking an asynchronous Data 
Abort exception. The possible values are: 
eee Uncontainable error (UC). 
ee1 Unrecoverable error (UEU). 
Note 
The recovery software must also examine any implemented fault records to determine the 
location and extent of the error. 
EA, [9] 
Reserved, RESO. 
RESO, [8:6] 
Reserved, RESO. 
DFSC, [5:0] 
Data Fault Status Code. The possible values of this field are: 
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B2 AArch64 system registers 
B2.36 DISR_EL1, Deferred Interrupt Status Register, EL1 
@10001 Asynchronous SError interrupt. 
Note 
In AArch32 the 810001 code previously meant an Asynchronous External Abort on 


memory access. With the RAS extension, it extends to include any asynchronous 
SError interrupt. The Parity Error codes are not used in the RAS extension. 








Configurations 
There are no configuration notes. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.37 ERRIDR_EL1, Error ID Register, EL1 


B2.37 ERRIDR_EL1, Error ID Register, EL1 
The ERRIDR_ELI defines the number of error record registers. 


Bit field descriptions 


ERRIDR_ ELI is a 32-bit register, and is part of the registers Reliability, Availability, Serviceability 
(RAS) functional group. 


This register is Read Only. 


31 1615 0 


RESO 


Figure B2-33 ERRIDR_EL1 bit assignments 
RESO, [31:16] 
RESO Reserved. 
NUM, [15:0] 
Number of records that can be accessed through the Error Record system registers. 


@x@e02 Two records present. 


Configurations 
There are no configuration notes. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.38 ERRSELR_EL1, Error Record Select Register, EL1 


B2.38 ERRSELR_EL1, Error Record Select Register, EL1 
The ERRSELR_EL]I selects which error record should be accessed through the Error Record system 


registers. This register is not reset on a warm reset. 
Bit field descriptions 


ERRSELR_ EL] is a 64-bit register, and is part of the Reliability, Availability, Serviceability (RAS) 
registers functional group. 


63 1 (0 
SEL— 
RESO 


Figure B2-34 ERRSELR_EL1 bit assignments 
RESO, [63:1] 
Reserved,RESO. 
SEL, [0] 
Selects which error record should be accessed. 


() Select record 0 containing errors from Level | and Level 2 RAMs located on the 
Cortex-A76 core. 


1 Select record | containing errors from Level 3 RAMs located on the DSU. 


Configurations 
There are no configuration notes. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.39 ERXADDR_EL1, Selected Error Record Address Register, EL1 


B2.39 ERXADDR_EL1, Selected Error Record Address Register, EL1 


Register ERXADDR_ ELI accesses the ERR<n>ADDR address register for the error record selected by 
ERRSELR_EL1.SEL. 


If ERRSELR_EL1.SEL==0, then ERXADDR_ EL] accesses the ERROADDR register of the core error 
record. See B3.2 ERROADDR, Error Record Address Register on page B3-295. 


If ERRSELR_EL1.SEL==1, then ERXADDR_ ELI accesses the ERRIADDR register of the DSU error 
record. See the Arm® DynamIQ™ Shared Unit Technical Reference Manual. 
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B2 AArch64 system registers 
B2.40 ERXCTLR_EL1, Selected Error Record Control Register, EL1 


B2.40 ERXCTLR_EL1, Selected Error Record Control Register, EL1 


Register ERXCTLR_ELI accesses the ERR<n>CTLR control register for the error record selected by 
ERRSELR_EL1.SEL. 


If ERRSELR_EL1.SEL==0, then ERXCTLR_EL1 accesses the ERROCTLR register of the core error 
record. See B3.3 ERROCTLR, Error Record Control Register on page B3-296. 


If ERRSELR_EL1.SEL==1, then ERXCLTR_EL] accesses the ERR1ICTLR register of the DSU error 
record. See the Arm® DynamIQ™ Shared Unit Technical Reference Manual. 
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B2 AArch64 system registers 
B2.41 ERXFR_EL1, Selected Error Record Feature Register, EL1 


B2.41 ERXFR_EL1, Selected Error Record Feature Register, EL1 


Register ERXFR_EL1 accesses the ERR<n>FR feature register for the error record selected by 
ERRSELR_EL1.SEL. 


If ERRSELR_EL1.SEL==0, then ERXFR_EL1 accesses the ERROFR register of the core error record. 
See B3.4 ERROFR, Error Record Feature Register on page B3-298. 





If ERRSELR_EL1.SEL==1, then ERXFR_EL1 accesses the ERRIFR register of the DSU error record. 
See the Arm® DynamIO™ Shared Unit Technical Reference Manual. 
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B2 AArch64 system registers 
B2.42 ERXMISCO_EL1, Selected Error Record Miscellaneous Register 0, EL1 


B2.42 ERXMISCO_EL1, Selected Error Record Miscellaneous Register 0, EL1 


Register ERXMISCO_EL1 accesses the ERR<n>MISCO register for the error record selected by 
ERRSELR_EL1.SEL. 


If ERRSELR_EL1.SEL==0, then ERXMISCO EL] accesses the ERROMISCO register of the core error 
record. See B3.5 ERROMISCO, Error Record Miscellaneous Register 0 on page B3-300. 


If ERRSELR_EL1.SEL==1, then ERXMISCO_ ELI accesses the ERR1 MISCO register of the DSU error 
record. See the Arm® DynamIOQ™ Shared Unit Technical Reference Manual. 
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B2 AArch64 system registers 
B2.43 ERXMISC1_EL1, Selected Error Record Miscellaneous Register 1, EL1 


B2.43  ERXMISC1_EL1, Selected Error Record Miscellaneous Register 1, EL1 


Register ERXMISC1_EL1 accesses the ERR<n>MISC1 miscellaneous register 1 for the error record 
selected by ERRSELR_EL1.SEL. 


If ERRSELR_EL1.SEL==0, then ERXMISC1_ EL] accesses the ERROMISC1 register of the core error 
record. See B3.6 ERROMISCI1, Error Record Miscellaneous Register I on page B3-303. 


If ERRSELR_EL1.SEL==1, then ERXMISC1 ELI accesses the ERR1MISC1 register of the DSU error 
record. See the Arm® DynamIOQ™ Shared Unit Technical Reference Manual. 
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B2 AArch64 system registers 
B2.44 ERXPFGCDNR_EL1, Selected Error Pseudo Fault Generation Count Down Register, EL1 


B2.44 ERXPFGCDNR_EL41, Selected Error Pseudo Fault Generation Count Down 
Register, EL1 


Register ERXPFGCDNR_ELI accesses the ERR<n>PFGCNDR register for the error record selected by 
ERRSELR_EL1.SEL. 


If ERRSELR_EL1.SEL==0, then ERXPFGCDNR_EL1 accesses the ERROPFGCDNR register of the 
core error record. See B3.7 ERROPFGCDNR, Error Pseudo Fault Generation Count Down Register 
on page B3-304. 


If ERRSELR_EL1.SEL==1, then ERXPFGCDNR_EL] accesses the ERR1 PFGCDNR register of the 
DSU error record. See the Arm® DynamIQ™ Shared Unit Technical Reference Manual. 


Configurations 
There are no configuration notes. 
Accessing the ERXPFGCDNR_EL1 
This register can be read using MRS with the following syntax: 
MRS <Xt>,<systemreg> 
This register can be written using MSR with the following syntax: 
MSR <Xt>,<systemreg> 


This syntax is encoded with the following settings in the instruction encoding: 





<systemreg> | op0/o0p1|CRn/|CRm | op2 























$3_0_C15_C2_2}11 | 000 | 1111 | 0010 | 010 





Accessibility 


This register is accessible in software as follows: 





<syntax> Control Accessibility 





E2H |TGE |NS ELO |EL1 |EL2 |EL3 











S30 C15 C22 x x 0 : RW |n/a |RW 
$3.0. C15 C22 x 0 1 _ RW |RW |RW 
$3 0 C15 C2 2 x 1 1 : wa |RW |RW 


























n/a_ Not accessible. Executing the PE at this Exception level is not permitted. 











Traps and enables 


For a description of the prioritization of any generated exceptions, see Exception priority order 
in the Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile for 
exceptions taken to AArch32 state, and see Synchronous exception prioritization for exceptions 
taken to AArch64 state. Subject to these prioritization rules, the following traps and enables are 
applicable when accessing this register. 


ERXPFGCDNR _ ELI is accessible at EL3 and can be accessible at EL1 and EL2 depending on 
the value of bit[5] in ACTLR_EL2 and ACTLR_EL3. See 82.6 ACTLR_EL2, Auxiliary Control 
Register, EL2 on page B2-145 and B2.7 ACTLR_EL3, Auxiliary Control Register, EL3 

on page B2-147. 


ERXPFGCDNR_ELI is UNDEFINED at ELO. 
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B2 AArch64 system registers 
B2.45 ERXPFGCTLR_EL1, Selected Error Pseudo Fault Generation Control Register, EL1 


B2.45 ERXPFGCTLR_EL1, Selected Error Pseudo Fault Generation Control 
Register, EL1 


Register ERXPFGCTLR_ELI accesses the ERR<n>PFGCTLR register for the error record selected by 
ERRSELR_EL1.SEL. 


If ERRSELR_EL1.SEL==0, then ERXPFGCTLR_ELI accesses the ERROPFGCTLR register of the core 
error record. See B3.8 ERROPFGCTLR, Error Pseudo Fault Generation Control Register 
on page B3-305. 


If ERRSELR_EL1.SEL==1, then ERXPFGCTLR_ ELI accesses the ERR1PFGCTLR register of the 
DSU error record. See the Arm® DynamIQ™ Shared Unit Technical Reference Manual. 


Configurations 
There are no configuration notes. 
Accessing the ERXPFGCTLR_EL1 
This register can be read using MRS with the following syntax: 
MRS <Xt>,<systemreg> 
This register can be written using MSR with the following syntax: 
MSR <Xt>,<systemreg> 


This syntax is encoded with the following settings in the instruction encoding: 





<systemreg> | op0/o0p1|CRn/|CRm | op2 























$3_0_C15_C2_1}11 | 000 | 1111 | 0010 | 001 





Accessibility 


This register is accessible in software as follows: 





<syntax> Control Accessibility 


E2H |TGE |NS ELO |EL1 |EL2 |EL3 














$3.0 C15 C21 x x 0 : RW |n/a |RW 
$3.0 C15 C21 x 0 1 : RW |RW |RW 
$3.0 C15 C21 x 1 1 = nwa |RW |RW 
































‘n/a' Not accessible. The PE cannot be executing at this Exception level, so this access is not possible. 
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B2 AArch64 system registers 
B2.45 ERXPFGCTLR_EL1, Selected Error Pseudo Fault Generation Control Register, EL1 


Traps and enables 


For a description of the prioritization of any generated exceptions, see Exception priority order 
in the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile for 
exceptions taken to AArch32 state, and see Synchronous exception prioritization for exceptions 
taken to AArch64 state. Subject to these prioritization rules, the following traps and enables are 
applicable when accessing this register. 


ERXPFGCTLR_ELI 1s accessible at EL3 and can be accessible at EL1 and EL2 depending on 
the value of bit[5] in ACTLR_EL2 and ACTLR_EL3. See 82.6 ACTLR_EL?2, Auxiliary Control 
Register, EL2 on page B2-145 and B2.7 ACTLR_EL3, Auxiliary Control Register, EL3 

on page B2-147. 


ERXPFGCTLR_ELI is UNDEFINED at ELO. 


If ERXPFGCTLR_ELI is accessible at EL1 and HCR_EL2.TERR == 1, then direct reads and 
writes of ERXPFGCTLR_EL1 at Non-secure EL1 generate a Trap exception to EL2. 


If ERXPFGCTLR_ ELI is accessible at EL1 or EL2 and SCR_EL3.TERR == 1, then direct 
reads and writes of ERXPFGCTLR_ELI at EL] or EL2 generate a Trap exception to EL3. 
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B2 AArch64 system registers 
B2.46 ERXPFGFR_EL1, Selected Pseudo Fault Generation Feature Register, EL1 


B2.46 ERXPFGFR_EL1, Selected Pseudo Fault Generation Feature Register, EL1 


Register ERXPFGFR_EL1 accesses the ERR<n>PFGFR register for the error record selected by 
ERRSELR_EL1.SEL. 


If ERRSELR_EL1.SEL==0, then ERXPFGFR_EL1 accesses the ERROPFGFR register of the core error 
record. See B3.9 ERROPFGFR, Error Pseudo Fault Generation Feature Register on page B3-307. 


If ERRSELR_EL1.SEL==1, then ERXPFGFR_EL1 accesses the ERRIPFGFR register of the DSU error 
record. See the Arm® DynamIQ™ Shared Unit Technical Reference Manual. 


Configurations 


This core has no configuration notes. 


Accessing the ERXPFGFR_EL1 


This register can be read using MRS with the following syntax: 


MRS <Xt>,<systemreg> 


This syntax is encoded with the following settings in the instruction encoding: 





<systemreg> | op0{|op1|CRn|CRm | op2 





$3.0 C15 C20] 11 | 000 | 1111 |0010 | 000 























Accessibility 


This register is accessible in software as follows: 





<syntax> Control Accessibility 





E2H |TGE |NS ELO |EL1 |EL2 |EL3 






































$3.0 C15 C20 x x 0 : RO [nla [RO 
S3_0_C15 C20 x 0 1 4 RO |RO [RO 
S3_0_C15 C20 x 1 1 : nia |RO [RO 





‘n/a’ Not accessible. The PE cannot be executing at this Exception level, so this access is not 
possible. 


Traps and enables 


For a description of the prioritization of any generated exceptions, see Exception priority order 
in the Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile for 
exceptions taken to AArch32 state, and see Synchronous exception prioritization for exceptions 
taken to AArch64 state. Subject to these prioritization rules, the following traps and enables are 
applicable when accessing this register. 


ERXPFGR_ELI is accessible at EL3 and can be accessible at EL1 and EL2 depending on the 
value of bit[S] in ACTLR_EL2 and ACTLR_EL3. See 82.6 ACTLR_EL2, Auxiliary Control 
Register, EL2 on page B2-145 and B2.7 ACTLR_EL3, Auxiliary Control Register, EL3 

on page B2-147. 


ERXPFGR_EL] is UNDEFINED at ELO. 


If ERXPFGR_EL1 is accessible at EL1 and HCR_EL2.TERR == 1, then direct reads and writes 
of ERXPFGR_EL] at Non-secure EL] generate a Trap exception to EL2. 


If ERXPFGR_EL1 is accessible at EL1 or EL2 and SCR_EL3.TERR == 1, then direct reads and 
writes of ERXPFGR_EL1 at EL1 or EL2 generate a Trap exception to EL3. 





100798_0301_00_en 


Copyright © 2016-2018 Arm Limited or its affiliates. All rights B2-208 
reserved. 
Non-Confidential 


B2 AArch64 system registers 
B2.47 ERXSTATUS_EL1, Selected Error Record Primary Status Register, EL1 


B2.47 ERXSTATUS_EL1, Selected Error Record Primary Status Register, EL1 


Register ERXSTATUS_ ELI accesses the ERR<n>STATUS primary status register for the error record 
selected by ERRSELR_EL1.SEL. 


If ERRSELR_EL1.SEL==0, then ERXSTATUS_EL1 accesses the ERROSTATUS register of the core 
error record. See B3.10 ERROSTATUS, Error Record Primary Status Register on page B3-309. 


If ERRSELR_EL1.SEL==1, then ERXSTATUS_EL]1 accesses the ERRISTATUS register of the DSU 
error record. See the Arm® DynamIQ™ Shared Unit Technical Reference Manual. 
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B2 AArch64 system registers 
B2.48 ESR_EL1, Exception Syndrome Register, EL1 


B2.48 ESR_EL1, Exception Syndrome Register, EL1 


The ESR_EL1 holds syndrome information for an exception taken to EL1. 


Bit field descriptions 
ESR_ ELI is a 32-bit register, and is part of the Exception and fault handling registers functional group. 


31 26 25 24 0 


Pe {Po 
| IL 


Figure B2-35 ESR_EL1 bit assignments 


a OP ee Class. Indicates the reason for the exception that this register holds information 
about. 
IL, [25] 
Instruction Length for synchronous exceptions. The possible values are: 
@ 16-bit. 
1 32-bit. 


This field is 1 for the SError interrupt, instruction aborts, misaligned PC, Stack pointer 
misalignment, data aborts for which the ISV bit is @, exceptions caused by an illegal instruction 
set state, and exceptions using the @x@@ Exception Class. 


ISS, [24:0] 
Syndrome information. 
When reporting a virtual SEI, bits[24:0] take the value of VSESRL_EL2[24:0]. 


When reporting a physical SEI, the following occurs: 

¢ IDS=0 (architectural syndrome). 

¢ AET always reports an uncontainable error (UC) with value @b90@ or an unrecoverable error (UEU) 
with value @bee1. 

¢ EA is RESO. 


When reporting a synchronous data abort, EA is RESO. 
See B2.103 VSESR_EL2, Virtual SError Exception Syndrome Register on page B2-289. 
Configurations 


This register has no configuration options. 
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B2 AArch64 system registers 
B2.49 ESR_EL2, Exception Syndrome Register, EL2 


B2.49 ESR_EL2, Exception Syndrome Register, EL2 


The ESR_EL2 holds syndrome information for an exception taken to EL2. 


Bit field descriptions 
ESR_EL2 is a 32-bit register, and is part of: 


The Virtualization registers functional group. 
The Exception and fault handling registers functional group. 


31 26 25 24 0 
LIL 


Figure B2-36 ESR_EL2 bit assignments 


EC, [31:26] 


IL, [25] 


Exception Class. Indicates the reason for the exception that this register holds information 
about. See the Arm® Architecture Reference Manual Armv6, for Armv8-A architecture profile for 
more information. 


Instruction Length for synchronous exceptions. The possible values are: 
@ 16-bit. 
1 32-bit. 


See the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile for more 
information. 


ISS, [24:0] 


Syndrome information. See the Arm® Architecture Reference Manual Armv8, for Armv8-A 
architecture profile for more information. 


When reporting a virtual SEI, bits[24:0] take the value of VSESRL_EL2[24:0]. 


When reporting a physical SEI, the following occurs: 

« IDS==0 (architectural syndrome). 

« AET always reports an uncontainable error (UC) with value @b@@@ or an unrecoverable error 
(UEU) with value @be01. 

¢ EA is RESO. 


When reporting a synchronous Data Abort, EA is RESo. 
See B2.103 VSESR_EL2, Virtual SError Exception Syndrome Register on page B2-289. 


Configurations 


RW fields in this register reset to architecturally UNKNOWN values. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8&, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.50 ESR_EL3, Exception Syndrome Register, EL3 


B2.50 ESR_EL3, Exception Syndrome Register, EL3 


The ESR_EL3 holds syndrome information for an exception taken to EL3. 


Bit field descriptions 
ESR_EL3 is a 32-bit register, and is part of the Exception and fault handling registers functional group. 


31 26 25 24 0 


Pe {Po 
| IL 


Figure B2-37 ESR_EL3 bit assignments 


a OP ee Class. Indicates the reason for the exception that this register holds information 
about. 
IL, [25] 
Instruction Length for synchronous exceptions. The possible values are: 
@ 16-bit. 
1 32-bit. 


This field is 1 for the SError interrupt, instruction aborts, misaligned PC, Stack pointer 
misalignment, data aborts for which the ISV bit is @, exceptions caused by an illegal instruction 
set state, and exceptions using the @x@ Exception Class. 


ISS, [24:0] 
Syndrome information. 
When reporting a virtual SEI, bits[24:0] take the value of VSESRL_EL2[24:0]. 


When reporting a physical SEI, the following occurs: 

¢ IDS=0 (architectural syndrome). 

¢ AET always reports an uncontainable error (UC) with value @b90@ or an unrecoverable error (UEU) 
with value @bee1. 

¢ EA is RESO. 


When reporting a synchronous data abort, EA is RESO. 
See B2.103 VSESR_EL2, Virtual SError Exception Syndrome Register on page B2-289. 
Configurations 


RW fields in this register reset to architecturally UNKNOWN values. 
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B2 AArch64 system registers 
B2.51 HACR_EL2, Hyp Auxiliary Configuration Register, EL2 


B2.51 HACR_EL2, Hyp Auxiliary Configuration Register, EL2 


HACR_EL2 controls trapping to EL2 of IMPLEMENTATION DEFINED aspects of Non-secure EL1 or ELO 
operation. This register is not used in the Cortex-A76 core. 


Bit field descriptions 


HACR_EL2 is a 32-bit register, and is part of Virtualization registers functional group. 


31 0 


EE 


RESO 


Figure B2-38 HACR_EL2 bit assignments 
RESO, [31:0] 
Reserved, RESO. 
Configurations 
There are no configuration notes. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé, for Armv8-A architecture profile. 





100798 _0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights B2-213 
reserved. 
Non-Confidential 


B2 AArch64 system registers 
B2.52 HCR_EL2, Hypervisor Configuration Register, EL2 


B2.52 HCR_EL2, Hypervisor Configuration Register, EL2 


The HCR_EL2 provides configuration control for virtualization, including whether various Non-secure 
operations are trapped to EL2. 


Bit field descriptions 


HCR_EL2 is a 64-bit register, and is part of the Virtualization registers functional group. 
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Figure B2-39 HCR_EL2 bit assignments 
RESO, [63:39] 
RESO Reserved. 
MIOCNCE, [38] 


Mismatched Inner/Outer Cacheable Non-Coherency Enable, for the Non-secure EL] and ELO 
translation regime. 


RW, [31] 
RES1 Reserved. 
HCD, [29] 


RESO Reserved. 
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B2 AArch64 system registers 
B2.52 HCR_EL2, Hypervisor Configuration Register, EL2 


TGE, [27] 


Traps general exceptions. If this bit is set, and SCR_EL3.NS is set, then: 

¢ All exceptions that would be routed to EL1 are routed to EL2. 

¢ The SCTLR_ELI.M bit is treated as @ regardless of its actual state, other than for reading the 
bit. 

¢ The HCR_EL2.FMO, IMO, and AMO bits are treated as 1 regardless of their actual state, 
other than for reading the bits. 

¢ All virtual interrupts are disabled. 

¢ Any IMPLEMENTATION DEFINED mechanisms for signaling virtual interrupts are disabled. 

« An exception return to EL] is treated as an illegal exception return. 


HCR_EL2.TGE must not be cached in a TLB. 


When the value of SCR_EL3.NS is 0 the core behaves as if this field is 0 for all purposes other 
than a direct read or write access of HCR_EL2. 


TID3, [18] 


Traps ID group 3 registers. The possible values are: 
) ID group 3 register accesses are not trapped. 
1 Reads to ID group 3 registers executed from Non-secure EL] are trapped to EL2. 


See the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile for the 
registers covered by this setting. 


Configurations 


If EL2 is not implemented, this register is Reso from EL3 
RW fields in this register reset to architecturally UNKNOWN values. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.53 ID_AA64AFRO_EL1, AArch64 Auxiliary Feature Register 0 


B2.53 ID_AA64AFRO_EL1, AArch64 Auxiliary Feature Register 0 
The core does not use this register, ID AA64AFRO EL] is REso. 
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B2 AArch64 system registers 
B2.54 ID_AA64AFR1_EL1, AArch64 Auxiliary Feature Register 1 


B2.54 ID_AA64AFR1_EL1, AArch64 Auxiliary Feature Register 1 
The core does not use this register, ID AA64AFRO_ EL] is REso. 
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B2 AArch64 system registers 
B2.55 ID_AA64DFRO_EL1, AArch64 Debug Feature Register 0, EL1 


B2.55 ID_AAG64DFRO_EL1, AArch64 Debug Feature Register 0, EL1 
Provides top-level information about the debug system in AArché4. 
Bit field descriptions 
ID_AA64DFRO_ ELI is a 64-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


63 32 31 28 27 24 23 20 19 1615 12 11 





RESO 


Figure B2-40 ID_AA64DFRO0_EL1 bit assignments 


RESO, [63:32] 
RESO Reserved. 
CTX_CMPs, [31:28] 


Number of breakpoints that are context-aware, minus |. These are the highest numbered 
breakpoints: 


@x1 Two breakpoints are context-aware. 
RESO, [27:24] 

RESO Reserved. 
WRPs, [23:20] 

The number of watchpoints minus |: 

@x3 Four watchpoints. 
RESO, [19:16] 

RESO Reserved. 
BRPs, [15:12] 

The number of breakpoints minus |: 

@x5 Six breakpoints. 
PMUVer, [11:8] 

Performance Monitors Extension version. 

ex4 Performance monitor system registers implemented, PMUv3. 
TraceVer, [7:4] 

Trace extension: 

exe Trace system registers not implemented. 
DebugVer, [3:0] 

Debug architecture version: 


@x8 Armv8-A debug architecture implemented. 
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B2 AArch64 system registers 
B2.55 ID_AA64DFRO_EL1, AArch64 Debug Feature Register 0, EL1 


Configurations 


ID_AA64DFRO_EL] is architecturally mapped to external register EDDFR. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.56 ID_AA64DFR1_EL1, AArch64 Debug Feature Register 1, EL1 


B2.56 ID_AA64DFR1_EL1, AArch64 Debug Feature Register 1, EL1 


This register is reserved for future expansion of top level information about the debug system in 
AArch64 state. 
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B2 AArch64 system registers 
B2.57 ID_AA64ISARO_EL1, AArch64 Instruction Set Attribute Register 0, EL1 


B2.57  ID_AA64ISARO_EL1, AArch64 Instruction Set Attribute Register 0, EL1 


The ID_AA64ISARO_ EL] provides information about the instructions implemented in AArch64 state, 
including the instructions that are provided by the Cryptographic Extension. 


Bit field descriptions 

ID_AA64ISARO_ ELI is a 64-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 

The optional Cryptographic Extension is not included in the base product of the core. Arm requires 


licensees to have contractual rights to obtain the Cryptographic Extension. 


63 48 47 44 43 32 31 28 27 24 23 20 19 16.15 12 


11 8 7 4 3 0 


RESO 


Figure B2-41 ID_AA64ISARO_EL1 bit assignments 
RESO, [63:48] 
RESO Reserved. 
DP, [47:44] 
Indicates whether Dot Product support instructions are implemented. 
@x1 UDOT, SDOT instructions are implemented. 
RESO, [43:32] 
RESO Reserved. 
RDM, [31:28] 
Indicates whether SQRDMLAH and SQRDMLSH instructions in AArch64 are implemented. 
@x1 SQRDMLAH and SQRDMLSH instructions implemented. 
RESO, [27:24] 
RESO Reserved. 
Atomic, [23:20] 
Indicates whether Atomic instructions in AArch64 are implemented. The value is: 


@x2 LDADD, LDCLR, LDEOR, LDSET, LDSMAX, LDSMIN, LDUMAX, LDUMIN, CAS, CASP, and SWP 
instructions are implemented 


CRC32, [19:16] 
Indicates whether CRC32 instructions are implemented. The value is: 
ex1 CRC32 instructions are implemented. 

SHA2, [15:12] 


Indicates whether SHA2 instructions are implemented. The possible values are: 





100798 _0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights B2-221 
reserved. 
Non-Confidential 


B2 AArch64 system registers 
B2.57 ID_AA64ISARO_EL1, AArch64 Instruction Set Attribute Register 0, EL1 


exe No SHA2 instructions are implemented. This is the value if the core implementation 
does not include the Cryptographic Extension. 
@x1 SHA256H, SHA256H2, SHA256U@, and SHA256U1 implemented. This is the value if the 
core implementation includes the Cryptographic Extension. 
SHA, [11:8] 
Indicates whether SHA1 instructions are implemented. The possible values are: 
exe No SHA1 instructions implemented. This is the value if the core implementation does 
not include the Cryptographic Extension. 
@x1 SHA1C, SHA1P, SHA1M, SHA1SU®, and SHA1SU1 implemented. This is the value if the 
core implementation includes the Cryptographic Extension. 
AES, [7:4] 
Indicates whether AES instructions are implemented. The possible values are: 
exe No AES instructions implemented. This is the value if the core implementation does 
not include the Cryptographic Extension. 


@x2 AESE, AESD, AESMC, and AESIMC implemented, plus PMULL and PMULL2 instructions 
operating on 64-bit data. This is the value if the core implementation includes the 
Cryptographic Extension. 





[3:0] 
Reserved, RESO. 
Configurations 
ID_AA64ISARO_ EL] is architecturally mapped to external register ID_AA64ISARO. 
Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.58 ID_AA64ISAR1_EL1, AArch64 Instruction Set Attribute Register 1, EL1 


B2.58 ID _AA64ISAR1_EL1, AArch64 Instruction Set Attribute Register 1, EL1 
The ID_AA64ISAR1_ EL] provides information about the instructions implemented in AArch64 state. 
Bit field descriptions 


ID_AA64ISAR1 ELI is a 64-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


63 24.23 20 19 4 3 0 


LRCPC DC CVAP 


RESO 


Figure B2-42 ID_AA64ISAR1_EL1 bit assignments 
RESO, [63:24] 


RESO Reserved. 
LRCPVC, [23:20] 


Indicates whether load-acquire (LDA) instructions are implemented for a Release Consistent core 
consistent RCPC model. 


@x1 The LDAPRB, LDAPRH, and LDAPR instructions are implemented in AArch64. 
RESO, [19:4] 

RESO Reserved. 
DC CVAP, [3:0] 


Indicates whether Data Cache, Clean to the Point of Persistence (DC CVAP) instructions are 


implemented. 
ex1 DC CVAP is supported in AArch64. 
Configurations 


There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv6, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.59 ID_LAA64MMFRO_EL1, AArch64 Memory Model Feature Register 0, EL1 


B2.59 ID_AA64MMFRO_EL1, AArch64 Memory Model Feature Register 0, EL1 


The ID AA64MMFRO ELI provides information about the implemented memory model and memory 
management support in the AArch64 Execution state. 


Bit field descriptions 
ID_AA64MMEFRO ELI is a 64-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


63 32 31 28 27 24 23 20 19 16.15 12.11 8 7 4 3 0 
TGran64 | TGranié6 | BigEndELO} SNSMem BigEnd ASIDBits | PARange 
RESO 


Figure B2-43 ID_AA64MMFRO_EL1 bit assignments 

RESO, [63:32] 

RESO Reserved. 
TGran4, [31:28] 

Support for 4B memory translation granule size: 

@xe 4KB granule supported. 
TGran64, [27:24] 

Support for 64KB memory translation granule size: 

@xe 64KB granule supported. 
TGran16, [23:20] 

Support for 16KB memory translation granule size: 

@x1 Indicates that the 16KB granule is supported. 
BigEndELO, [19:16] 

Mixed-endian support only at ELO. 

exe No mixed-endian support at ELO. The SCTLR_EL1.E0E bit has a fixed value. 
SNSMem, [15:12] 

Secure versus Non-secure Memory distinction: 

ex1 Supports a distinction between Secure and Non-secure Memory. 
BigEnd, [11:8] 

Mixed-endian configuration support: 


ex1 Mixed-endian support. The SCTLR_ELx.EE and SCTLR_EL1.E0E bits can be 
configured. 


ASIDBits, [7:4] 
Number of ASID bits: 


@x2 16 bits. 
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B2 AArch64 system registers 
B2.59 ID_LAA64MMFRO_EL1, AArch64 Memory Model Feature Register 0, EL1 


PARange, [3:0] 
Physical address range supported: 
@x2 40 bits, 1TB. 
The supported Physical Address Range is 40-bits. Other cores in the DSU may support 
a different Physical Address Range. 
Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.60 ID_AA64MMFR1_EL1, AArch64 Memory Model Feature Register 1, EL1 


B2.60 ID _AA64MMFR1_EL1, AArch64 Memory Model Feature Register 1, EL1 


The ID AA64MMFRI1 ELI provides information about the implemented memory model and memory 
management support in the AArch64 Execution state. 


Bit field descriptions 


ID_AA64MMERI ELI is a 64-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


63 32 31 28 27 24 23 20 19 16 15 12 11 8 7 4 3 0 
| cata ita ia 
RESO 


Figure B2-44 ID_AA64MMFR1_EL1 bit assignments 
RESO, [63:32] 
RESO Reserved. 
XNX, [31:28] 
Indicates whether provision of ELO vs EL1 execute never control at Stage 2 is supported. 


@x1 ELO/EL1 execute control distinction at Stage 2 bit is supported. All other values are 
reserved. 


SpecSEI, [27:24] 


Describes whether the PE can generate SError interrupt exceptions from speculative reads of 
memory, including speculative instruction fetches. 


exe The PE never generates an SError interrupt due to an external abort on a speculative 
read. 


PAN, [23:20] 


Privileged Access Never. Indicates support for the PAN bit in PSTATE, SPSR_EL1, SPSR_EL2, 
SPSR_EL3, and DSPSR_ELO. 


@x2 PAN supported and AT SIEIRP and AT S1E1WP instructions supported. 
LO, [19:16] 
Indicates support for LORegions. 


@x1 
LORegions are supported. 


HD, [15:12] 


Presence of Hierarchical Disables. Enables an operating system or hypervisor to hand over up to 
4 bits of the last level page table descriptor (bits[62:59] of the page table entry) for use by 
hardware for IMPLEMENTATION DEFINED usage. The value is: 


@x2 Hierarchical Permission Disables and Hardware allocation of bits[62:59] supported. 
VH, [11:8] 


Indicates whether Virtualization Host Extensions are supported. 
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B2 AArch64 system registers 
B2.60 ID_AA64MMFR1_EL1, AArch64 Memory Model Feature Register 1, EL1 


@x1 Virtualization Host Extensions supported. 
VMID, [7:4] 
Indicates the number of VMID bits supported. 
@x2 16 bits are supported. 
HAFDBS, [3:0] 
Indicates the support for hardware updates to Access flag and dirty state in translation tables. 
@x2 Hardware update of both the Access flag and dirty state is supported in hardware. 
Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.61 ID_AA64MMFR2_EL1, AArch64 Memory Model Feature Register 2, EL1 


B2.61 ID _AA64MMFR2_EL1, AArch64 Memory Model Feature Register 2, EL1 


The ID AA64MMFR2_ ELI provides information about the implemented memory model and memory 
management support in the AArch64 Execution state. 


Bit field descriptions 


ID_AA64MMFR2 ELI is a 64-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


63 1615 12 11 8 


7 4 3 0 








RESO 
Figure B2-45 ID_AA64MMFR2_EL1 bit assignments 
RESO, [63:16] 
RESO Reserved. 
IESB, [15:12] 
Indicates whether an implicit Error Synchronization Barrier has been inserted. The value is: 
ex1 SCTLR_ELx.IESB implicit ErrorSynchronizationBarrier control implemented. 
LSM, [11:8] 
Indicates whether LDM and STM ordering control bits are supported. The value is: 
@xe LSMAOE and nTLSMD bit not supported. 
UAO, [7:4] 
Indicates the presence of the User Access Override (UAO). The value is: 
@x1 UAO is supported. 
CnP, [3:0] 
Common not Private. Indicates whether a TLB entry is pointed at a translation table base 
register that is a member of a common set. The value is: 
@x1 CnP bit is supported. 
Configurations 
There are no configuration notes. 
Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv6, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.62 ID_AA64PFRO_EL1, AArch64 Processor Feature Register 0, EL1 


B2.62 ID _AA64PFRO_EL1, AArch64 Processor Feature Register 0, EL1 
The ID_AA64PFRO EL] provides additional information about implemented core features in AArch64. 


The optional Advanced SIMD and floating-point support is not included in the base product of the core. 
Arm requires licensees to have contractual rights to obtain the Advanced SIMD and floating-point 
support. 


Bit field descriptions 


ID_AA64PFRO_ ELI is a 64-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


63 60 59 56 55 32 31 28 27 24 23 20 19 16 15 1211 8 7 4 3 0 
EL3 EL2 EL1 ELO 
Se pove BevAlND handling handling handling handling 
RESO 


Figure B2-46 ID_AA64PFRO0_EL1 bit assignments 
CSV3, [63:60] 


ex1 Data loaded under speculation with a permission or domain fault cannot be used to 
form an address or generate condition codes to be used by instructions newer than the 
load in the speculative sequence. This is the reset value. 


All other values reserved. 


CSV2, [59:56] 


ex1 Branch targets trained in one context cannot affect speculative execution in a different 
hardware described context. This is the reset value. 


All other values reserved. 
RESO, [55:32] 


RESO Reserved. 


RAS, [31:28] 
RAS extension version. The possible values are: 
exe RAS extension is not present. This is the value if the core implementation does not 
have ECC present. 
ex1 Version | of the RAS extension is present. This is the value if the core implementation 
has ECC present. 


GIC, [27:24] 
GIC CPU interface: 
@x® GIC CPU interface is disabled, GICCDISABLE is HIGH, or not implemented. 
ex1 GIC CPU interface is implemented and enabled, GICCDISABLE is LOW. 
AdvSIMD, [23:20] 
Advanced SIMD. The possible values are: 


@x1 Advanced SIMD, including Half-precision support, is implemented. 
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B2 AArch64 system registers 
B2.62 ID_AA64PFRO_EL1, AArch64 Processor Feature Register 0, EL1 


FP, [19:16] 
Floating-point. The possible values are: 


ex1 Floating-point, including Half-precision support, is implemented. 


EL3 handling, [15:12] 
EL3 exception handling: 


@x1 Instructions can be executed at EL3 in AArch64 state only. 


EL2 handling, [11:8] 
EL2 exception handling: 


@x1 Instructions can be executed at EL3 in AArch64 state only. 


EL1 handling, [7:4] 

EL] exception handling. The possible values are: 

@x1 Instructions can be executed at EL3 in AArch64 state only. 
ELO handling, [3:0] 

ELO exception handling. The possible values are: 

@x2 Instructions can be executed at ELO in AArch64 or AArch32 state. 
Configurations 

ID_AA64PFRO_EL1 is architecturally mapped to External register EDPFR. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.63 ID_AA64PFR1_EL1, AArch64 Processor Feature Register 1, EL1 


B2.63 ID _AA64PFR1_EL1, AArch64 Processor Feature Register 1, EL1 


The ID_AA64PFRI EL] provides additional information about implemented core features in AArch64. 
Bit field descriptions 


ID_AA64PFRI_ ELI is a 64-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


63 


8 7 4 3 0 
js fo 
RESO 
Figure B2-47 ID_AA64PFR1_EL1 bit assignments 
RESO, [63:8] 


RESO Reserved. 
SSBS, [7:4] 
PSTATE.SSBS. The possible values are: 


@x1 AArch64 provides the PSTATE.SSBS mechanism to mark regions that are Speculative 


Store Bypassing Safe (SSBS), but does not implement the MSR/MRS instructions to 
directly read and write the PSTATE.SSBS field. 


RESO, [3:0] 
RESO Reserved. 
Configurations 
ID_AA64PFRI1_ ELI is architecturally mapped to External register EDPFR. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv6, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.64 ID_AFRO_EL1, AArch32 Auxiliary Feature Register 0, EL1 


B2.64 ID_AFRO_EL1, AArch32 Auxiliary Feature Register 0, EL1 


The ID_AFRO_ ELI provides information about the IMPLEMENTATION DEFINED features of the PE in 
AArch32. This register is not used in the Cortex-A76 core. 


Bit field descriptions 


ID_AFRO_ELI is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


31 0 
RESO 
Figure B2-48 ID_AFRO_EL1 bit assignments 
RESO, [31:0] 
Reserved, RESO. 
Configurations 


There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé6, for Armv8-A architecture profile. 





100798_0301_00_en 


Copyright © 2016-2018 Arm Limited or its affiliates. All rights B2-232 
reserved. 
Non-Confidential 


B2.65 


B2 AArch64 system registers 
B2.65 ID_DFRO_EL1, AArch32 Debug Feature Register 0, EL1 


ID_DFRO_EL1, AArch32 Debug Feature Register 0, EL1 


The ID_DFRO_ ELI provides top-level information about the debug system in AArch32. 


Bit field descriptions 
ID_DFRO_ EL] is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


28 27 24 23 20 19 1615 12 11 


RESO 


Figure B2-49 ID_DFRO_EL1 bit assignments 
RESO, [31:28] 
RESO Reserved. 
PerfMon, [27:24] 
Indicates support for performance monitor model: 


4 Support for Performance Monitor Unit version 3 (PMUv3) system registers, with a 
16-bit evtCount field. 


MProfDbg, [23:20] 
Indicates support for memory-mapped debug model for M profile cores: 
) This product does not support M profile Debug architecture. 
MMapTre, [19:16] 
Indicates support for memory-mapped trace model: 
1 Support for Arm trace architecture, with memory-mapped access. 
In the Trace registers, the ETMIDR gives more information about the implementation. 
CopTre, [15:12] 
Indicates support for coprocessor-based trace model: 
) This product does not support Arm trace architecture. 
RESO, [11:8] 
RESO Reserved. 
CopSDbg, [7:4] 
Indicates support for coprocessor-based Secure debug model: 
8 This product supports the Armv8.2 Debug architecture. 
CopDbg, [3:0] 
Indicates support for coprocessor-based debug model: 


8 This product supports the Armv8.2 Debug architecture. 
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B2 AArch64 system registers 
B2.65 ID_DFRO_EL1, AArch32 Debug Feature Register 0, EL1 


Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2.66 


B2 AArch64 system registers 
B2.66 ID_ISARO_EL1, AArch32 Instruction Set Attribute Register 0, EL1 


ID_ISARO_EL1, AArch32 Instruction Set Attribute Register 0, EL1 


The ID_ISARO_ ELI provides information about the instruction sets implemented by the core in 
AArch32. 


Bit field descriptions 
ID_ISARO_ELI is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


31 28 27 24 23 20 19 1615 12 11 8 7 4 3 0 





RESO 


Figure B2-50 ID_ISARO_EL1 bit assignments 

RESO, [31:28] 

RESO Reserved. 
Divide, [27:24] 

Indicates the implemented Divide instructions: 

@x2 * SDIV and UDIV in the T32 instruction set. 

¢ SDIV and UDIV in the A32 instruction set. 

Debug, [23:20] 

Indicates the implemented Debug instructions: 


@x1 BKPT. 


Coproc, [19:16] 
Indicates the implemented Coprocessor instructions: 


exe None implemented, except for instructions separately attributed by the architecture to 
provide access to AArch32 System registers and System instructions. 


CmpBranch, [15:12] 


Indicates the implemented combined Compare and Branch instructions in the T32 instruction 
set: 


6x1 CBNZ and CBZ. 
Bitfield, [11:8] 
Indicates the implemented bit field instructions: 
ex1 BFC, BFI, SBFX, and UBFX. 
BitCount, [7:4] 
Indicates the implemented Bit Counting instructions: 


@x1 CLZ. 
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B2 AArch64 system registers 
B2.66 ID_ISARO_EL1, AArch32 Instruction Set Attribute Register 0, EL1 


Swap, [3:0] 
Indicates the implemented Swap instructions in the A32 instruction set: 


@xe None implemented. 


Configurations 
In an AArch64-only implementation, this register is UNKNOWN. 


Must be interpreted with ID ISAR1_ EL1,ID_ ISAR2 ELI, ID _ISAR3 EL1,ID_ISAR4 ELI, 
ID_ISARS ELI, and ID ISAR6 ELI. See: 

¢ B2.67ID_ISARI_EL1, AArch32 Instruction Set Attribute Register 1, ELI on page B2-237. 
¢ B2.68 ID ISAR2_ ELI, AArch32 Instruction Set Attribute Register 2, EL1 on page B2-239. 
¢ B2.69ID_ISAR3 ELI, AArch32 Instruction Set Attribute Register 3, EL1 on page B2-241. 
¢ B2.70 ID_ISAR4_EL1, AArch32 Instruction Set Attribute Register 4, ELI on page B2-243. 
¢ B2.71 ID_ISARS_EL1, AArch32 Instruction Set Attribute Register 5, ELI on page B2-245. 
¢ B2.72 ID_ISAR6_EL1, AArch32 Instruction Set Attribute Register 6, ELI on page B2-247. 





Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.67 ID_ISAR1_EL1, AArch32 Instruction Set Attribute Register 1, EL1 





B2.67 ID_ISAR1_EL1, AArch32 Instruction Set Attribute Register 1, EL1 
The ID_ISAR1_ EL] provides information about the instruction sets implemented by the core in 
AArch32. 
Bit field descriptions 
ID_ISAR1_ ELI is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 
28 27 24 23 20 19 16 15 12 11 
Figure B2-51 ID_ISAR1_EL1 bit assignments 
Jazelle, [31:28] 
Indicates the implemented Jazelle state instructions: 
@x1 Adds the BXJ instruction, and the J bit in the PSR. 
Interwork, [27:24] 
Indicates the implemented Interworking instructions: 
x3 ¢ The BX instruction, and the T bit in the PSR. 
¢ The BLX instruction. The PC loads have Bx-like behavior. 
¢ Data-processing instructions in the A32 instruction set with the PC as the 
destination and the S bit clear, have Bx-like behavior. 
Immediate, [23:20] 
Indicates the implemented data-processing instructions with long immediates: 
@x1 ¢ The MOVT instruction. 
¢ The MOV instruction encodings with zero-extended 16-bit immediates. 
¢ The T32 ADD and SUB instruction encodings with zero-extended 12-bit immediates, 
and other ADD, ADR, and SUB encodings cross-referenced by the pseudocode for 
those encodings. 
IfThen, [19:16] 
Indicates the implemented If-Then instructions in the T32 instruction set: 
@x1 The IT instructions, and the IT bits in the PSRs. 
Extend, [15:12] 
Indicates the implemented Extend instructions: 
@x2 ¢ The SXTB, SXTH, UXTB, and UXTH instructions. 
¢ The SXTB16, SXTAB, SXTAB16, SXTAH, UXTB16, UXTAB, UXTAB16, and UXTAH 
instructions. 
Except_AR, [11:8] 
Indicates the implemented A profile exception-handling instructions: 
ex1 The SRS and RFE instructions, and the A profile forms of the CPS instruction. 
Except, [7:4] 
Indicates the implemented exception-handling instructions in the A32 instruction set: 
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@x1 The LDM (exception return), LDM (user registers), and STM (user registers) instruction 
versions. 


Endian, [3:0] 
Indicates the implemented Endian instructions: 


@x1 The SETEND instruction, and the E bit in the PSRs. 


Configurations 
In an AArch64-only implementation, this register is UNKNOWN. 


Must be interpreted with ID ISARO_EL1,ID ISAR2_ EL1,ID ISAR3 EL1, ID ISAR4 ELI, 
ID_ISARS ELI, and ID ISAR6 ELI. See: 

¢ B2.66ID_ISARO_ELI, AArch32 Instruction Set Attribute Register 0, ELI on page B2-235. 
¢ B2.68 ID _ISAR2 ELI, AArch32 Instruction Set Attribute Register 2, ELI on page B2-239. 
¢ B2.69ID_ISAR3_EL1, AArch32 Instruction Set Attribute Register 3, ELI on page B2-241. 
¢ B2.70 ID_ISAR4 ELI, AArch32 Instruction Set Attribute Register 4, ELI on page B2-243. 
¢ B2.71 ID_ISARS ELI, AArch32 Instruction Set Attribute Register 5, ELI on page B2-245. 
¢ B2.72 ID_ISAR6_EL1, AArch32 Instruction Set Attribute Register 6, ELI on page B2-247. 





Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2.68 ID_ISAR2_EL1, AArch32 Instruction Set Attribute Register 2, EL1 


The ID_ISAR2_ ELI provides information about the instruction sets implemented by the core in 
AArch32. 


Bit field descriptions 
ID_ISAR2 ELI is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


28 27 24 23 20 19 1615 12 11 


MultiAccessInt — 


Figure B2-52 ID_ISAR2_EL1 bit assignments 
Reversal, [31:28] 
Indicates the implemented Reversal instructions: 


@x2 The REV, REV16, REVSH, and RBIT instructions. 


PSR_AR, [27:24] 
Indicates the implemented A and R profile instructions to manipulate the PSR: 


ex1 The MRS and MSR instructions, and the exception return forms of data-processing 
instructions. 


The exception return forms of the data-processing instructions are: 


¢ Inthe A32 instruction set, data-processing instructions with the PC as the destination and the 
S bit set. 
¢ Inthe T32 instruction set, the SUBSPC, LR, #N instruction. 


MultU, [23:20] 
Indicates the implemented advanced unsigned Multiply instructions: 


@x2 The UMULL, UMLAL, and UMAAL instructions. 


Mult, [19:16] 
Indicates the implemented advanced signed Multiply instructions. 


@x3 ¢ The SMULL and SMLAL instructions. 
¢ The SMLABB, SMLABT, SMLALBB, SMLALBT, SMLALTB, SMLALTT, SMLATB, SMLATT, 
SMLAWB, SMLAWT, SMULBB, SMULBT, SMULTB, SMULTT, SMULWB, SMULWT instructions, 
and the Q bit in the PSRs. 
* The SMLAD, SMLADX, SMLALD, SMLALDX, SMLSD, SMLSDX, SMLSLD, SMLSLDX, SMMLA, 
SMMLAR, SMMLS, SMMLSR, SMMUL, SMMULR, SMUAD, SMUADX, SMUSD, and SMUSDX 
instructions. 


Mult, [15:12] 
Indicates the implemented additional Multiply instructions: 


@x2 The MUL, MLA and MLS instructions. 


MultiAccessInt, [11:8] 


Indicates the support for interruptible multi-access instructions: 
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exe No support. This means the LDM and STM instructions are not interruptible. 


MemHint, [7:4] 
Indicates the implemented memory hint instructions: 


@x4 The PLD, PLI, and PLDWinstructions. 


LoadStore, [3:0] 
Indicates the implemented additional load/store instructions: 
@x2 The LDRD and STRD instructions. 


The Load Acquire (LDAB, LDAH, LDA, LDAEXB, LDAEXH, LDAEX, and LDAEXD) and Store 
Release (STLB, STLH, STL, STLEXB, STLEXH, STLEX, and STLEXD) instructions. 


Configurations 
In an AArch64-only implementation, this register is UNKNOWN. 


Must be interpreted with ID ISARO_EL1, ID ISARI EL1,ID ISAR3 EL1,ID ISAR4 ELI, 
ID_ISARS ELI, andID_ISAR6 ELI. See: 

¢ B2.66 ID _ISARO_ELI, AArch32 Instruction Set Attribute Register 0, ELI on page B2-235. 
¢ B2.67ID_ISARI_ ELI, AArch32 Instruction Set Attribute Register 1, EL1 on page B2-237. 
¢ B2.69 ID ISAR3_ ELI, AArch32 Instruction Set Attribute Register 3, EL] on page B2-241. 
¢ B2.70 ID_ISAR4 ELI, AArch32 Instruction Set Attribute Register 4, EL1 on page B2-243. 
¢ B2.71 ID_ISARS EL1, AArch32 Instruction Set Attribute Register 5, ELI on page B2-245. 
¢ B2.72 ID_ISAR6_ELI, AArch32 Instruction Set Attribute Register 6, ELI on page B2-247. 





Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 





100798 0301 _00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights B2-240 
reserved. 
Non-Confidential 


B2.69 


B2 AArch64 system registers 
B2.69 ID_ISAR3_EL1, AArch32 Instruction Set Attribute Register 3, EL1 


ID_ISAR3_EL1, AArch32 Instruction Set Attribute Register 3, EL1 


The ID_ISAR3_ELI1 provides information about the instruction sets implemented by the core in 
AArch32. 


Bit field descriptions 
ID_ISAR3_ ELI is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


28 27 24 23 20 19 1615 12 11 


T32EE TrueNOP | T32Copy | TabBranch cra SIMD 


Figure B2-53 ID_ISAR3_EL1 bit assignments 
T32EE, [31:28] 
Indicates the implemented T32EE instructions: 
exe None implemented. 
TrueNOP, [27:24] 
Indicates support for True NOP instructions: 


@x1 True NOP instructions in both the A32 and T32 instruction sets, and additional NOP- 
compatible hints. 


T32Copy, [23:20] 
Indicates the support for T32 non flag-setting MOV instructions: 


ex1 Support for T32 instruction set encoding T1 of the MOV (register) instruction, copying 
from a low register to a low register. 


TabBranch, [19:16] 
Indicates the implemented Table Branch instructions in the T32 instruction set. 
ex1 The TBB and TBH instructions. 

SynchPrim, [15:12] 
Indicates the implemented Synchronization Primitive instructions: 


@x2 ¢ The LDREX and STREX instructions. 
« The CLREX, LDREXB, STREXB, and STREXH instructions. 
¢ The LDREXD and STREXD instructions. 


SVC, [11:8] 
Indicates the implemented SVC instructions: 


@x1 The SVC instruction. 
SIMD, [7:4] 


Indicates the implemented Single Instruction Multiple Data (SIMD) instructions. 
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@x3 ¢ The SSAT and USAT instructions, and the Q bit in the PSRs. 
* The PKHBT, PKHTB, QADD16, QADD8, QASX, QSUB16, QSUB8, QSAX, SADD16, SADD8, 
SASX, SEL, SHADD16, SHADD8, SHASX, SHSUB16, SHSUB8, SHSAX, SSAT16, SSUB16, 
SSUB8, SSAX, SXTAB16, SXTB16, UADD16, UADD8, UASX, UHADD16, UHADD8, UHASX, 
UHSUB16, UHSUB8, UHSAX, UQADD16, UQADD8, UQASX, UQSUB16, UQSUB8, UQSAX, 
USAD8, USADA8, USAT16, USUB16, USUB8, USAX, UXTAB16, UXTB16 instructions, and 
the GE[3:0] bits in the PSRs. 


The SIMD field relates only to implemented instructions that perform SIMD 
operations on the general-purpose registers. In an implementation that supports 
Advanced SIMD and floating-point instructions, MVFRO, MVFRI1, and MVFR2 give 
information about the implemented Advanced SIMD instructions. 


Saturate, [3:0] 
Indicates the implemented Saturate instructions: 


ex1 The QADD, QDADD, QDSUB, QSUB Q bit in the PSRs. 


Configurations 
In an AArch64-only implementation, this register is UNKNOWN. 


Must be interpreted with ID ISARO _EL1,ID ISARI EL1,ID ISAR2 EL1, ID ISAR4 ELI, 
ID_ISARS ELI, and ID ISAR6 ELI. See: 

¢ B2.66ID_ISARO_ ELI, AArch32 Instruction Set Attribute Register 0, EL1 on page B2-235. 
¢ B2.67ID ISARI_ ELI, AArch32 Instruction Set Attribute Register 1, EL1 on page B2-237. 
¢ B2.68 ID ISAR2_ ELI, AArch32 Instruction Set Attribute Register 2, EL1 on page B2-239. 
¢ B2.70ID_ISAR4 ELI, AArch32 Instruction Set Attribute Register 4, EL1 on page B2-243. 
¢ B2.71 ID_ISARS_EL1, AArch32 Instruction Set Attribute Register 5, ELI on page B2-245. 
¢ B2.72 ID_ISAR6 ELI, AArch32 Instruction Set Attribute Register 6, EL1 on page B2-247. 





Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2.70 ID_ISAR4_EL1, AArch32 Instruction Set Attribute Register 4, EL1 
The ID_ISAR4 EL] provides information about the instruction sets implemented by the core in 
AArch32. 
Bit field descriptions 
ID_ISAR4 ELI is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 
28 27 24 23 20 19 16 15 12 11 
nd 
SynchPrim_frac a 
Figure B2-54 ID_ISAR4_EL1 bit assignments 

SWP_ frac, [31:28] 

Indicates support for the memory system locking the bus for SWP or SWPB instructions: 

exe SWP and SWPB instructions not implemented. 
PSR_M, [27:24] 

Indicates the implemented M profile instructions to modify the PSRs: 

exe None implemented. 
SynchPrim_frac, [23:20] 

This field is used with the ID ISAR3.SynchPrim field to indicate the implemented 

Synchronization Primitive instructions: 

exe ¢ The LDREX and STREX instructions. 

¢ The CLREX, LDREXB, LDREXH, STREXB, and STREXH instructions. 
¢ The LDREXD and STREXD instructions. 

Barrier, [19:16] 

Indicates the supported Barrier instructions in the A32 and T32 instruction sets: 

@x1 The DMB, DSB, and ISB barrier instructions. 
SMC, [15:12] 

Indicates the implemented SMC instructions: 

exe None implemented. 
WriteBack, [11:8] 

Indicates the support for Write-Back addressing modes: 

ex1 Core supports all the Write-Back addressing modes as defined in Armv8-A. 
WithShifts, [7:4] 

Indicates the support for instructions with shifts. 
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@x4 ¢ Support for shifts of loads and stores over the range LSL 0-3. 
¢ Support for other constant shift options, both on load/store and other instructions. 
¢ Support for register-controlled shift options. 


Unpriv, [3:0] 
Indicates the implemented unprivileged instructions. 


@x2 ¢ The LDRBT, LDRT, STRBT, and STRT instructions. 
¢ The LDRHT, LDRSBT, LDRSHT, and STRHT instructions. 


Configurations 
In an AArch64-only implementation, this register is UNKNOWN. 


Must be interpreted with ID ISARO EL1,ID_ISAR1 ELI, ID_ISAR2 EL1,ID_ISAR3 ELI, 
ID_ISARS ELI, and ID ISAR6 ELI. See: 

¢ B2.66ID_ISARO_EL1, AArch32 Instruction Set Attribute Register 0, ELI on page B2-235. 
¢ B2.67ID ISARI_ ELI, AArch32 Instruction Set Attribute Register 1, EL1 on page B2-237. 
¢ B2.68 ID_ISAR2_EL1, AArch32 Instruction Set Attribute Register 2, EL1 on page B2-239. 
¢ B2.69ID_ISAR3_EL1, AArch32 Instruction Set Attribute Register 3, EL1 on page B2-241. 
¢ B2.71 ID_ISARS_EL1, AArch32 Instruction Set Attribute Register 5, EL1 on page B2-245. 
¢ B2.72 ID_ISAR6_EL1, AArch32 Instruction Set Attribute Register 6, EL1 on page B2-247. 





Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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ID_ISAR5_EL1, AArch32 Instruction Set Attribute Register 5, EL1 


The ID ISAR5_ EL] provides information about the instruction sets that the core implements. 


Bit field descriptions 
ID_ISARS5_ ELI is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


28 27 24 23 20 19 16 15 12 11 


RESO 


Figure B2-55 ID_ISAR5_EL1 bit assignments 

[31:28] 

RESO Reserved. 
RDM, [27:24] 

VQRDMLAH and VQRDMLSH instructions in AArch32. The value is: 

@x1 VQRDMLAH and VQRDMLSH instructions are implemented. 
[23:20] 

RESO Reserved. 
CRC32, [19:16] 

Indicates whether CRC32 instructions are implemented in AArch32 state. The value is: 


6x1 CRC32B, CRC32H, CRC32W, CRC32CB, CRC32CH, and CRC32CW instructions are 
implemented. 


SHAQ, [15:12] 


Indicates whether SHA2 instructions are implemented in AArch32 state. The possible values 
are: 


@x® No SHA2 instructions implemented. This is the value when the Cryptographic 
Extensions are not implemented or are disabled. 

@x1 SHA256H, SHA256H2, SHA256SU@, and SHA256SU1 instructions are implemented. This is 
the value when the Cryptographic Extensions are implemented and enabled. 


SHALL, [11:8] 


Indicates whether SHA1 instructions are implemented in AArch32 state. The possible values 
are: 


@x® No SHA1 instructions implemented. This is the value when the Cryptographic 
Extensions are not implemented or are disabled. 

@x1 SHA1C, SHA1P, SHA1M, SHA1H, SHA1SU@, and SHA1SU1 instructions are implemented. 
This is the value when the Cryptographic Extensions are implemented and enabled. 


AES, [7:4] 
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Indicates whether AES instructions are implemented in AArch32 state. The possible values are: 


@x® No AES instructions implemented. This is the value when the Cryptographic 
Extensions are not implemented or are disabled. 


@x2 * AESE, AESD, AESMC, and AESIMC implemented. 
* PMULL and PMULL2 instructions operating on 64-bit data. 


This is the value when the Cryptographic Extensions are implemented and enabled. 


SEVL, [3:0] 
Indicates whether the SEVL instruction is implemented: 


ex1 SEVL implemented to send event local. 


Configurations 

ID_ISARS must be interpreted with ID ISARO_EL1, ID ISAR1 EL1,ID ISAR2 ELI, 
ID_ISAR3_EL1, ID_ISAR4 ELI, and ID ISAR6 ELI. See: 

¢ B2.66 ID _ISARO ELI, AArch32 Instruction Set Attribute Register 0, EL1 on page B2-235. 
¢ B2.67ID_ISARI_EL1, AArch32 Instruction Set Attribute Register 1, EL1 on page B2-237. 
¢ B2.68 ID_ISAR2_EL1, AArch32 Instruction Set Attribute Register 2, EL1 on page B2-239. 
¢ B2.69ID_ISAR3_EL1, AArch32 Instruction Set Attribute Register 3, EL1 on page B2-241. 
¢ B2.70 ID_ISAR4_EL1, AArch32 Instruction Set Attribute Register 4, EL1 on page B2-243. 
¢ B2.72 ID_ISAR6_EL1, AArch32 Instruction Set Attribute Register 6, EL1 on page B2-247. 








Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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ID_ISAR6_EL1, AArch32 Instruction Set Attribute Register 6, EL1 


The ID ISAR6_EL!1 provides information about the instruction sets that the core implements. 


Bit field descriptions 
ID_ISAR6_ELI is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


31 8 7 4 3 0 


RESO 


Figure B2-56 ID_ISAR6_EL1 bit assignments 

RESO, [31:8] 

RESO Reserved. 
DP, [7:4] 

UDOT and SDOT instructions. The value is: 

@beee1 UDOT and SDOT instructions are implemented. 
RESO, [3:0] 

RESO Reserved. 
Configurations 


There is one copy of this register that is used in both Secure and Non-secure states. 


ID_ISAR6_ EL! must be interpreted with ID ISARO EL1,ID ISARI EL1,ID ISAR2 ELI, 
ID_ISAR3_ EL1, ID ISAR4 ELI, andID_ISARS ELI. See: 

¢ B2.66 ID _ISARO ELI, AArch32 Instruction Set Attribute Register 0, EL1 on page B2-235. 
¢ B2.67ID_ISARI_EL1, AArch32 Instruction Set Attribute Register 1, ELI on page B2-237. 
¢ B2.68 ID ISAR2 ELI, AArch32 Instruction Set Attribute Register 2, EL1 on page B2-239. 
¢ B2.69ID_ISAR3_ EL1, AArch32 Instruction Set Attribute Register 3, ELI on page B2-241. 
¢ B2.70ID_ISAR4 ELI, AArch32 Instruction Set Attribute Register 4, EL1 on page B2-243. 
¢ B2.71ID_ISARS ELI, AArch32 Instruction Set Attribute Register 5, EL1 on page B2-245. 











Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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ID_MMFRO_EL1, AArch32 Memory Model Feature Register 0, EL1 


The ID MMFRO_ ELI provides information about the memory model and memory management support 
in AArch32. 


Bit field descriptions 
ID_MMFRO EL] is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


28 27 24 23 20 19 1615 12 11 


Fos jason | Tom | sharelwi | outershr | eMsa | VMSA 


Figure B2-57 ID_MMFRO_EL1 bit assignments 

InnerShr, [31:28] 

Indicates the innermost shareability domain implemented: 

@x1 Implemented with hardware coherency support. 
FCSE, [27:24] 

Indicates support for Fast Context Switch Extension (FCSE): 

exe Not supported. 
AuxReg, [23:20] 

Indicates support for Auxiliary registers: 


@x2 Support for Auxiliary Fault Status Registers (AIFSR and ADFSR) and Auxiliary 
Control Register. 


TCM, [19:16] 
Indicates support for TCMs and associated DMAs: 
exe Not supported. 
ShareLvl, [15:12] 
Indicates the number of shareability levels implemented: 
@x1 Two levels of shareability implemented. 
OuterShr, [11:8] 
Indicates the outermost shareability domain implemented: 
@x1 Implemented with hardware coherency support. 
PMSA, [7:4] 
Indicates support for a Protected Memory System Architecture (PMSA): 
exe Not supported. 
VMSA, [3:0] 
Indicates support for a Virtual Memory System Architecture (VMSA). 
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@x5 Support for: 
« VMSAv7, with support for remapping and the Access flag. 
¢ The PXN bit in the Short-descriptor translation table format descriptors. 
¢ The Long-descriptor translation table format. 


Configurations 
Must be interpreted with ID MMFRI_EL1, ID MMFR2 ELI, ID MMFR3_ ELI, and 


ID_MMFR4 ELI. See: 

¢ B2.74ID_MMFRI_ ELI, AArch32 Memory Model Feature Register 1, EL] on page B2-250. 
¢ B2.75 ID_MMFR2_ ELI, AArch32 Memory Model Feature Register 2, EL] on page B2-252. 
¢ B2.76 ID_MMFR3_ELI1, AArch32 Memory Model Feature Register 3, ELI on page B2-254. 
¢ B2.77 ID _MMFR4 ELI, AArch32 Memory Model Feature Register 4, ELI on page B2-256. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2.74 ID _MMFR1_EL1, AArch32 Memory Model Feature Register 1, EL1 
The ID MMFRI1_ ELI provides information about the memory model and memory management support 
in AArch32. 
Bit field descriptions 
ID_MMEFRI1 EL] is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 
28 27 24 23 20 19 16 15 12 11 
Figure B2-58 ID_MMFR1_EL1 bit assignments 
BPred, [31:28] 
Indicates branch predictor management requirements: 
x4 For execution correctness, branch predictor requires no flushing at any time. 
L1TstCln, [27:24] 
Indicates the supported L1 Data cache test and clean operations, for Harvard or unified cache 
implementation: 
exe None supported. 
L1Uni, [23:20] 
Indicates the supported entire L1 cache maintenance operations, for a unified cache 
implementation: 
exe None supported. 
L1Hvd, [19:16] 
Indicates the supported entire L1 cache maintenance operations, for a Harvard cache 
implementation: 
exe None supported. 
L1UniSW, [15:12] 
Indicates the supported L1 cache line maintenance operations by set/way, for a unified cache 
implementation: 
@xe None supported. 
L1HvdSW, [11:8] 
Indicates the supported L1 cache line maintenance operations by set/way, for a Harvard cache 
implementation: 
@xe None supported. 
L1UniVA, [7:4] 
Indicates the supported L1 cache line maintenance operations by MVA, for a unified cache 
implementation: 
exe None supported. 
L1HvdVA, [3:0] 
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Indicates the supported L1 cache line maintenance operations by MVA, for a Harvard cache 
implementation: 


exe None supported. 


Configurations 
Must be interpreted with ID MMFRO_EL1, ID MMFR2 ELI, ID MMFR3_ ELI, and 
ID_MMFR4 ELI. See: 
¢ B2.73 ID_MMFRO_ELI, AArch32 Memory Model Feature Register 0, ELI on page B2-248. 
¢ B2.75 ID _MMFR2 ELI, AArch32 Memory Model Feature Register 2, EL] on page B2-252. 
¢ B2.76 ID _MMFR3_ELI, AArch32 Memory Model Feature Register 3, EL] on page B2-254. 
¢ B2.77 ID _MMFR4 ELI, AArch32 Memory Model Feature Register 4, ELI on page B2-256. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.75 ID_LMMFR2_EL1, AArch32 Memory Model Feature Register 2, EL1 


ID_MMFR2_EL1, AArch32 Memory Model Feature Register 2, EL1 


The ID MMFR2_ ELI provides information about the implemented memory model and memory 
management support in AArch32. 


Bit field descriptions 
ID_MMFR2 EL] is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


28 27 24 23 20 19 1615 12 11 


HWAccFlg | WFIStall UniTLB HvdTLB |LL1HvdRng| L1HvdBG | L1HvdFG 


Figure B2-59 ID_MMFR2_EL1 bit assignments 
HWaAccFig, [31:28] 


Hardware access flag. Indicates support for a hardware access flag, as part of the VMSAv7 
implementation: 


exe Not supported. 


WFIStall, [27:24] 
Wait For Interrupt Stall. Indicates the support for Wait For Interrupt (WFI) stalling: 
ex1 Support for WFI stalling. 


MemBarr, [23:20] 
Memory Barrier. Indicates the supported CP15 memory barrier operations. 


@x2 Supported CP15 memory barrier operations are: 
¢ Data Synchronization Barrier (DSB). 
¢ Instruction Synchronization Barrier (ISB). 
¢ Data Memory Barrier (DMB). 


UniTLB, [19:16] 


Unified TLB. Indicates the supported TLB maintenance operations, for a unified TLB 
implementation. 


@x6 Supported unified TLB maintenance operations are: 

¢ Invalidate all entries in the TLB. 

¢ Invalidate TLB entry by MVA. 

¢ Invalidate TLB entries by ASID match. 

¢ Invalidate instruction TLB and data TLB entries by MVA All ASID. This is a 
shared unified TLB operation. 

¢ Invalidate Hyp mode unified TLB entry by MVA. 

¢ Invalidate entire Non-secure EL1 and ELO unified TLB. 

¢ Invalidate entire Hyp mode unified TLB. 

¢* TLBIMVALIS, TLBIMVAALIS, TLBIMVALHIS, TLBIMVAL, TLBIMVAAL, and TLBIMVALH. 

¢ TLBIIPAS2IS, TLBIIPAS2LIS, TLBIIPAS2, and TLBIIPAS2L. 


HvdTLB, [15:12] 


Harvard TLB. Indicates the supported TLB maintenance operations, for a Harvard TLB 
implementation: 


exe Not supported. 
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B2 AArch64 system registers 
B2.75 ID_LMMFR2_EL1, AArch32 Memory Model Feature Register 2, EL1 


LL1HvdRng, [11:8] 


LI Harvard cache Range. Indicates the supported L1 cache maintenance range operations, for a 
Harvard cache implementation: 


@xe Not supported. 


LiHvdBG, [7:4] 


L1 Harvard cache Background fetch. Indicates the supported L1 cache background prefetch 
operations, for a Harvard cache implementation: 


@xe Not supported. 


L1HvdFG, [3:0] 


L1 Harvard cache Foreground fetch. Indicates the supported L1 cache foreground prefetch 
operations, for a Harvard cache implementation: 


@xe Not supported. 


Configurations 
Must be interpreted with ID MMFRO_EL1, ID MMFRI ELI, ID MMFR3_EL1, and 
ID_MMFR4 ELI. See: 
¢ B2.73 ID_MMFRO_ELI1, AArch32 Memory Model Feature Register 0, EL] on page B2-248. 
¢ B2.74ID_MMFRI_ ELI, AArch32 Memory Model Feature Register 1, EL] on page B2-250. 
¢ B2.76 ID _MMFR3_ELI1, AArch32 Memory Model Feature Register 3, EL] on page B2-254. 
¢ B2.77 ID MMFR4 ELI, AArch32 Memory Model Feature Register 4, EL] on page B2-256. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.76 ID_LMMFR3_EL1, AArch32 Memory Model Feature Register 3, EL1 








B2.76 ID _MMFR3_EL1, AArch32 Memory Model Feature Register 3, EL1 
The ID MMFR3_ELI provides information about the memory model and memory management support 
in AArch32. 
Bit field descriptions 
ID_MMFR3 ELI is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 
Figure B2-60 ID_MMFR3_EL1 bit assignments 
Supersec, [31:28] 
Supersections. Indicates support for supersections: 
exe Supersections supported. 
CMem$Sz, [27:24] 
Cached memory size. Indicates the size of physical memory supported by the core caches: 
@x2 1TByte or more, corresponding to a 40-bit or larger physical address range. 
CohWalk, [23:20] 
Coherent walk. Indicates whether translation table updates require a clean to the point of 
unification: 
ex1 Updates to the translation tables do not require a clean to the point of unification to 
ensure visibility by subsequent translation table walks. 
PAN, [19:16] 
Privileged Access Never. 
@x2 
PAN supported and new ATS1CPRP and ATS1CPWP instructions supported. 
MaintBest, [15:12] 
Maintenance broadcast. Indicates whether cache, TLB, and branch predictor operations are 
broadcast: 
@x2 Cache, TLB, and branch predictor operations affect structures according to 
shareability and defined behavior of instructions. 
BPMaint, [11:8] 
Branch predictor maintenance. Indicates the supported branch predictor maintenance operations. 
@x2 Supported branch predictor maintenance operations are: 
¢ Invalidate all branch predictors. 
¢ Invalidate branch predictors by MVA. 
CMaintSwW, [7:4] 
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Cache maintenance by set/way. Indicates the supported cache maintenance operations by set/ 
way. 
ex1 Supported hierarchical cache maintenance operations by set/way are: 

¢ Invalidate data cache by set/way. 


¢ Clean data cache by set/way. 
¢ Clean and invalidate data cache by set/way. 


CMaintVA, [3:0] 


Cache maintenance by Virtual Address (VA). Indicates the supported cache maintenance 
operations by VA. 


@x1 Supported hierarchical cache maintenance operations by VA are: 
¢ Invalidate data cache by VA. 
* Clean data cache by VA. 
¢ Clean and invalidate data cache by VA. 
¢ Invalidate instruction cache by VA. 
¢ Invalidate all instruction cache entries. 


Configurations 
Must be interpreted with ID MMFRO_EL1, ID MMFRI ELI, ID MMFR2 ELI, and 
ID_MMFR4 ELI. See: 
¢ B2.73 ID_MMFRO_ELI1, AArch32 Memory Model Feature Register 0, ELI on page B2-248. 
¢ B2.74ID_MMFRI_ ELI, AArch32 Memory Model Feature Register 1, ELI on page B2-250. 
¢ B2.75 ID_MMFR2_ ELI, AArch32 Memory Model Feature Register 2, ELI on page B2-252. 
¢ B2.77 ID _MMFR4_ ELI, AArch32 Memory Model Feature Register 4, ELI on page B2-256. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.77 ID_LMMFR4_EL1, AArch32 Memory Model Feature Register 4, EL1 


B2.77 ID_MMFR4_EL1, AArch32 Memory Model Feature Register 4, EL1 


The ID MMFR4 ELI provides information about the memory model and memory management support 
in AArch32. 

Bit field descriptions 

ID_MMFR4 EL] is a 32-bit register, and is part of the Identification registers functional group. 

This register is Read Only. 


31 24 23 20 19 1615 12 11 8 7 4 3 0 


Figure B2-61 ID_MMFR4_EL1 bit assignments 
RAZ, [31:24] 
Read-As-Zero. 
LSM, [23:20] 
Load/Store Multiple. Indicates whether adjacent loads or stores can be combined. The value is: 


exe LSMAOE and nTLSMD bit not supported. 
HD, [19:16] 


Presence of Hierarchical Disables. Enables an operating system or hypervisor to hand over up to 
4 bits of the last level page table descriptor (bits[62:59] of the page table entry) for use by 
hardware for IMPLEMENTATION DEFINED usage. The value is: 


@x2 Hierarchical Permission Disables and Hardware allocation of bits[62:59] supported. 


CNP, [15:12] 
Common Not Private. Indicates support for selective sharing of TLB entries across multiple 
PEs. The value is: 


@x1 CnP bit supported. 


XNX, [11:8] 
Execute Never. Indicates whether the stage 2 translation tables allows the stage 2 control of 
whether memory is executable at EL1 independent of whether memory is executable at ELO. 
The value is: 


@x1 ELO/EL1 execute control distinction at stage2 bit supported. 
AC2, [7:4] 


Indicates the extension of the ACTLR and HACTLR registers using ACTLR2 and HACTLR2. 
The value is: 


@x1 ACTLR2 and HACTLR2 are implemented. 
SpecSEI, [3:0] 


Describes whether the core can generate SError interrupt exceptions from speculative reads of 
memory, including speculative instruction fetches. The value is: 





exe The core never generates an SError interrupt due to an external abort on a speculative 
read. 
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B2 AArch64 system registers 
B2.77 ID_LMMFR4_EL1, AArch32 Memory Model Feature Register 4, EL1 


Configurations 


There is one copy of this register that is used in both Secure and Non-secure states. 


Must be interpreted with ID MMFRO_EL1, ID MMFRI ELI, ID MMFR2 ELI, and 
ID_MMFR3 ELI. See: 


B2.73 ID_MMFRO_EL1, AArch32 Memory Model Feature Register 0, EL1 on page B2-248. 
B2.74 ID_MMFR1_EL1, AArch32 Memory Model Feature Register 1, EL1 on page B2-250. 
B2.75 ID_MMFR2_EL1, AArch32 Memory Model Feature Register 2, EL1 on page B2-252. 
B2.76 ID_MMFR3_EL1, AArch32 Memory Model Feature Register 3, ELI on page B2-254. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2.78 ID_PFRO_EL1, AArch32 Processor Feature Register 0, EL1 


The ID_PFRO_ ELI provides top-level information about the instruction sets supported by the core in 
AArch32. 


Bit field descriptions 
ID_PFRO_ ELI is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


31 28 27 20 19 16.15 12.11 8 7 4 3 0 
RAS —hl CSV2 State3 State2 State1 Stated 


RESO 


Figure B2-62 ID_PFRO_EL1 bit assignments 
RAS, [31:28] 
RAS extension version. The value is: 


@x1 Version | of the RAS extension is present. 


RESO, [27:20] 
RESO Reserved. 
CSV2, [19:16] 


@xe This device does not disclose whether branch targets trained in one context can affect 
speculative execution in a different context. 


ex1 Branch targets trained in one context cannot affect speculative execution in a different 
hardware described context. This is the reset value. 


State3, [15:12] 
Indicates support for Thumb Execution Environment (T32EE) instruction set. This value is: 
exe Core does not support the T32EE instruction set. 
State2, [11:8] 
Indicates support for Jazelle. This value is: 
ex1 Core supports trivial implementation of Jazelle. 
Statel, [7:4] 
Indicates support for T32 instruction set. This value is: 


@x3 Core supports T32 encoding after the introduction of Thumb-2 technology, and for all 
16-bit and 32-bit T32 basic instructions. 


State0, [3:0] 
Indicates support for A32 instruction set. This value is: 


@x1 A32 instruction set implemented. 
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Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2.79 ID_PFR1_EL1, AArch32 Processor Feature Register 1, EL1 
The ID_PFR1_ EL] provides information about the programmers model and architecture extensions 
supported by the core. 
Bit field descriptions 
ID_PFR1_ ELI is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 
31 28 27 24 23 20 19 16.15 12.11 8 7 4 3 0 
Virtualization 
Figure B2-63 ID_PFR1_EL1 bit assignments 

GIC CPU, [31:28] 

GIC CPU support: 

() GIC CPU interface is disabled, GICCDISABLE is HIGH, or not implemented. 

1 GIC CPU interface is implemented and enabled, GICCDISABLE is LOW. 
Virt_frac, [27:24] 

() No features from the Armv7 Virtualization Extensions are implemented. 
Sec_frac, [23:20] 

) No features from the Armv7 Virtualization Extensions are implemented. 
GenTimer, [19:16] 

Generic Timer support: 

1 Generic Timer supported. 
Virtualization, [15:12] 

Virtualization support: 

) Virtualization not implemented. 
MProgMod, [11:8] 

M profile programmers model support: 

) Not supported. 
Security, [7:4] 

Security support: 

@ Security not implemented. 
ProgMod, [3:0] 

Indicates support for the standard programmers model for Armv4 and later. 

Model must support User, FIQ, IRQ, Supervisor, Abort, Undefined, and System modes: 

) Not supported. 
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Configurations 


There are no configuration notes. 
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B2.80 ID _PFR2_EL1, AArch32 Processor Feature Register 2, EL1 


The ID_PFR2_ EL] provides information about the programmers model and architecture extensions 
supported by the core. 


Bit field descriptions 
ID_PFR2_ ELI is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


31 7 4 3 0 


RESO 


Figure B2-64 ID_PFR2_EL1 bit assignments 
RESO, [31:8] 


RESO Reserved. 


SSBS, [7:4] 

1 AArch32 provides the PSTATE.SSBS mechanism to mark regions that are Speculative 

Store Bypassing Safe (SSBS). 
CSV3, [3:0] 

1 Data loaded under speculation with a permission or domain fault cannot be used to 
form an address or generate condition codes to be used by instructions newer than the 
load in the speculative sequence. This is the reset value. 

Configurations 


There are no configuration notes. 





100798 _0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights B2-262 
reserved. 
Non-Confidential 


B2 AArch64 system registers 
B2.81 LORC_EL1, LORegion Control Register, EL1 


B2.81 LORC_EL1, LORegion Control Register, EL1 
The LORC_ELI register enables and disables LORegions, and selects the current LORegion descriptor. 


Bit field descriptions 


LORC_EL] is a 64-bit register and is part of the Virtual memory control registers functional group. 


63 43210 
os | | | 
EN—! 


RESO 


Figure B2-65 LORC_EL1 bit assignments 


[63:4] 
Reserved, RESO. 


DS, [3:2] 
Descriptor Select. Number that selects the current LORegion descriptor accessed by the 
LORSA_EL1, LOREA_EL1, and LORN_ELI registers. 


[1] 


Reserved, RESO. 
EN, [0] 
Enable. The possible values are: 
@ Disabled. This is the reset value. 
1 Enabled. 
Configurations 
RW fields in this register reset to architecturally UNKNOWN values. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2.82 LORID_EL1, LORegion ID Register, EL1 
The LORID ELI ID register indicates the supported number of LORegions and LORegion descriptors. 


Bit field descriptions 
LORID_ EL} is a 64-bit register. 


63 24:23 1615 8 7 0 
a ae 


RESO 


Figure B2-66 LORID_EL1 bit assignments 


[63:24] 
Reserved, RESO. 


LD, [23:16] 
Number of LORegion descriptors supported by the implementation, expressed as binary 8-bit 
number. The value is: 


0x04 


[15:8] 
Reserved, RESO. 


LR, [7:0] 
Number of LORegions supported by the implementation, expressed as a binary 8-bit number. 
The value is: 


0x04 
Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv6, for Armv8-A architecture profile. 
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B2.83 LORN_EL1, LORegion Number Register, EL1 


The LORN _ ELI register holds the number of the LORegion described in the current LORegion 
descriptor selected by LORC_EL1.DS. 


Bit field descriptions 


LORN_ ELI is a 64-bit register and is part of the Virtual memory control registers functional group. 


63 210 


RESO 


Figure B2-67 LORN_EL1 bit assignments 


[63:2] 
Reserved, RESO. 


Num, [1:0] 
Indicates the LORegion number. 


Configurations 
RW fields in this register reset to architecturally UNKNOWN values. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2.84 MDCR_EL3, Monitor Debug Configuration Register, EL3 
The MDCR_EL3 provides configuration options for Security to self-hosted debug. 


Bit field descriptions 

MDCR_EL3 is a 32-bit register, and is part of: 
¢ The Debug registers functional group. 

¢ The Security registers functional group. 


31 22 212019181716151413 11109 87 65 0 
EPMAD — [ LTDA LTPM 
EDAD SPD32 TDOSA 
SDD 
RESO SPME 


Figure B2-68 MDCR_EL3 bit assignments 
EPMAD, [21] 


External debugger access to Performance Monitors registers disabled. This disables access to 
these registers by an external debugger. The possible values are: 


() Access to Performance Monitors registers from external debugger is permitted. 


1 Access to Performance Monitors registers from external debugger is disabled, unless 
overridden by authentication interface. 


EDAD, [20] 


External debugger access to breakpoint and watchpoint registers disabled. This disables access 
to these registers by an external debugger. The possible values are: 


7) Access to breakpoint and watchpoint registers from external debugger is permitted. 


1 Access to breakpoint and watchpoint registers from external debugger is disabled, 
unless overridden by authentication interface. 


SPME, [17] 


Secure performance monitors enable. This enables event counting exceptions from Secure state. 
The possible values are: 


7) Event counting prohibited in Secure state. 
1 Event counting allowed in Secure state. 
SPD32, [15:14] 


RESO 
Reserved. 


TDOSA, [10] 


Trap accesses to the OS debug system registers, OSLAR_EL1, OSLSR_EL1, OSDLR_EL1, and 
DBGPRCR_ELI OS. 


() Accesses are not trapped. 


1 Accesses to the OS debug system registers are trapped to EL3. 


The reset value is UNKNOWN. 
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TDA, [9] 
Trap accesses to the remaining sets of debug registers to EL3. 
2) Accesses are not trapped. 
1 Accesses to the remaining debug system registers are trapped to EL3. 
The reset value is UNKNOWN. 
Configurations 


There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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MIDR_EL1, Main ID Register, EL1 


The MIDR_EL] provides identification information for the core, including an implementer code for the 
device and a device ID number. 
Bit field descriptions 
MIDR_ ELI is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 
31 24 23 20 19 16 15 4 3 0 


Figure B2-69 MIDR_EL1 bit assignments 
Implementer, [31:24] 
Indicates the implementer code. This value is: 


@x41 ASCII character 'A' - implementer is Arm Limited. 


Variant, [23:20] 


Indicates the variant number of the core. This is the major revision number x in the rx part of the 
rxpy description of the product revision status. This value is: 


@x3 pl. 
Architecture, [19:16] 
Indicates the architecture code. This value is: 


@xF Defined by CPUID scheme. 


PartNum, [15:4] 
Indicates the primary part number. This value is: 
@xD@B_ Cortex-A76 core. 

Revision, [3:0] 


Indicates the minor revision number of the core. This is the minor revision number y in the py 
part of the rxpy description of the product revision status. This value is: 


@x1 pl. 
Configurations 
The MIDR_EL1 is architecturally mapped to external MIDR_ELI register. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2.86 MPIDR_EL1, Multiprocessor Affinity Register, EL1 


B2.86 MPIDR_EL1, Multiprocessor Affinity Register, EL1 


The MPIDR_EL!I provides an additional core identification mechanism for scheduling purposes in a 
cluster. 


Bit field descriptions 
MPIDR_ELI is a 64-bit register, and is part of the Other system control registers functional group. 


This register is Read Only. 





40 39 32 31 30 29 25 24:23 16 Tae] 11 ca] 
RES1 
RESO 
Figure B2-70 MPIDR_EL1 bit assignments 
RESO, [63:40] 
RESO Reserved. 
Aff3, [39:32] 
Affinity level 3. Highest level affinity field. 
CLUSTERID 
Indicates the value read in the CLUSTERIDAFF3 configuration signal. 
RES1, [31] 
RESI Reserved. 
U, [30] 
Indicates a single core system, as distinct from core 0 in a cluster. This value is: 
7) Core is part of a multiprocessor system. This is the value for implementations with 
more than one core, and for implementations with an ACE or CHI master interface. 
RESO, [29:25] 
RESO Reserved. 
MT, [24] 
Indicates whether the lowest level of affinity consists of logical cores that are implemented 
using a multithreading type approach. This value is: 
1 Performance of PEs at the lowest affinity level is very interdependent. 
Affinity0 represents threads. Cortex-A76 is not multithreaded, but may be in a system 
with other cores that are multithreaded. 
Aff2, [23:16] 
Affinity level 2. Second highest level affinity field. 
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B2 AArch64 system registers 
B2.86 MPIDR_EL1, Multiprocessor Affinity Register, EL1 


CLUSTERID 
Indicates the value read in the CLUSTERIDAFF?2 configuration signal. 


Aff1, [15:11] 
Part of Affinity level 1. Third highest level affinity field. 


RAZ Read-As-Zero. 
Aff, [10:8] 
Part of Affinity level 1. Third highest level affinity field. 
CPUID Identification number for each CPU in the Cortex-A76 cluster: 
@x@ MP1: CPUID: 0. 


to 
@x7 MP8: CPUID: 7. 


Aff0, [7:0] 
Affinity level 0. The level identifies individual threads within a multithreaded core. The 
Cortex-A76 core is single-threaded, so this field has the value @xee. 


Configurations 
MPIDR_EL1[31:0] is mapped to external register EDDEVAFFO. 
MPIDR_EL1[63:32] is mapped to external register EDDEVAFF1. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2.87 PAR_EL1, Physical Address Register, EL1 


B2.87 PAR_EL1, Physical Address Register, EL1 


The PAR_ELI returns the output address from an address translation instruction that executed 
successfully, or fault information if the instruction did not execute successfully. 


Bit field descriptions, PAR_EL1.F is 0 
The following figure shows the PAR bit assignments when PAR.F is 0. 






63 56 55 40.39 1211109 8 7 6 10 
ATTR | | PA a 


LPAE — 
IMP DEF 
NS 


Figure B2-71 PAR bit assignments, PAR_EL1.F is 0 


RESO 


IMP DEF, [10] 


IMPLEMENTATION DEFINED. Bit[10] is RESO. 


F, [0] 
Indicates whether the instruction performed a successful address translation. 
) Address translation completed successfully. 
1 Address translation aborted. 

Configurations 


There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 


Bit field descriptions, PAR_EL1.F is 1 


See the Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.88 REVIDR_EL1, Revision ID Register, EL1 


B2.88 REVIDR_EL1, Revision ID Register, EL1 
The REVIDR_ EL! provides revision information, additional to MIDR_EL1, that identifies minor fixes 
(errata) which might be present in a specific implementation of the Cortex-A76 core. 
Bit field descriptions 
REVIDR_ ELI is a 32-bit register, and is part of the Identification registers functional group. 
This register is Read Only. 


31 0 


IMPLEMENTATION DEFINED 


Figure B2-72 REVIDR_EL1 bit assignments 


IMPLEMENTATION DEFINED, [31:0] 


IMPLEMENTATION DEFINED. 


Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.89 RMR_EL3, Reset Management Register 


B2.89 RMR_EL3, Reset Management Register 
The RMR_EL3 controls the execution state that the core boots into and allows request of a Warm reset. 


Bit field descriptions 


RMR _ EL3 is a 32-bit register, and is part of the Reset management registers functional group. 


31 210 
RR— 
RES1 
RESO 


Figure B2-73 RMR_EL3 bit assignments 
RESO, [31:2] 


RESO Reserved. 


RR, [1] 
Reset Request. The possible values are: 
) This is the reset value on both a Warm and a Cold reset. 
1 Requests a Warm reset. 
The bit is strictly a request. 
RES1, [0] 
RES! Reserved. 
Configurations 


There are no configuration notes. 


Details that are not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.90 RVBAR_EL3, Reset Vector Base Address Register, EL3 


B2.90 RVBAR_EL3, Reset Vector Base Address Register, EL3 


RVBAR_ EL3 contains the IMPLEMENTATION DEFINED address that execution starts from after reset. 


Bit field descriptions 
RVBAR EL3 is a 64-bit register, and is part of the Reset management registers functional group. 
This register is Read Only. 


63 0 


$5 
Reset Vector Base Address 


Figure B2-74 RVBAR_EL3 bit assignments 





RVBA, [63:0] 


Reset Vector Base Address. The address that execution starts from after reset when executing in 
64-bit state. Bits[1:0] of this register are @b@@, as this address must be aligned, and bits [63:40] 
are @x@@00@0 because the address must be within the physical address size supported by the 
core. 


Configurations 
There are no configuration notes. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.91 SCTLR_EL1, System Control Register, EL1 


B2.91 SCTLR_EL1, System Control Register, EL1 


The SCTLR_ELI provides top-level control of the system, including its memory system, at EL1 and 
ELO. 


Bit field descriptions 
SCTLR_ELI is a 32-bit register, and is part of the Other system control registers functional group. 


This register resets to 0x30D50838. 


31 30 29 28 27 26 25 24 23 22 21 201918 17161514131211109 8 76543210 
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Figure B2-75 SCTLR_EL1 bit assignments 
RESO, [31:30] 


RESO Reserved. 


RES1, [29:28] 


RES1 Reserved. 


RESO, [27] 


RESO Reserved. 


EE, [25] 


Exception endianness. The value of this bit controls the endianness for explicit data accesses at 
EL1. This value also indicates the endianness of the translation table data for translation table 
lookups. The possible values of this bit are: 


7) Little-endian. 

1 Big-endian. 
ITD, [7] 

This field is RAZ/WI. 
RESO, [6] 


RESO Reserved. 


CP15BEN, [5] 
CP15 barrier enable. The possible values are: 


7) CP15 barrier operations disabled. Their encodings are UNDEFINED. 
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B2 AArch64 system registers 
B2.91 SCTLR_EL1, System Control Register, EL1 


1 CP15 barrier operations enabled. 
M, [0] 

MMU enable. The possible values are: 

@ ELI and ELO stage 1 MMU disabled. 

1 ELI and ELO stage 1 MMU enabled. 
Configurations 

There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.92 SCTLR_EL2, System Control Register, EL2 


B2.92 SCTLR_EL2, System Control Register, EL2 
The SCTLR_EL2 provides top-level control of the system, including its memory system at EL2. 


Bit field descriptions 

SCTLR_EL2 is a 32-bit register, and is part of: 

¢ The Virtualization registers functional group. 

¢ The Other system control registers functional group. 





Figure B2-76 SCTLR_EL2 bit assignments 
This register resets to 0x30C50838. 


Configurations 
If EL2 is not implemented, this register is REso from EL3. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv6, for Armv8-A architecture profile. 
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B2.93 


B2 AArch64 system registers 
B2.93 SCTLR_EL3, System Control Register, EL3 


SCTLR_EL3, System Control Register, EL3 


The SCTLR_EL3 provides top-level control of the system, including its memory system at EL3. 


Bit field descriptions 
SCTLR_EL3 is a 32-bit register, and is part of the Other system control registers functional group. 


This register resets to 0x30C50838. 





EE — IESB — LWXN LSA 
RES1 
RESO 
Figure B2-77 SCTLR_EL3 bit assignments 
RESO, [31:30] 
RESO Reserved. 
RES1, [29:28] 
RESI Reserved. 
RESO, [27:26] 
RESO Reserved. 
EE, [25] 


Exception endianness. This bit controls the endianness for: 


¢ Explicit data accesses at EL3. 
¢ Stage | translation table walks at EL3. 


The possible values are: 
) Little endian. 
1 Big endian. 


The reset value is determined by the CFGEND configuration signal. 


I, [12] 
Global instruction cache enable. The possible values are: 
) Instruction caches disabled. This is the reset value. 
1 Instruction caches enabled. 

C, [2] 
Global enable for data and unifies caches. The possible values are: 
7) Disables data and unified caches. This is the reset value. 
1 Enables data and unified caches. 

M, [0] 
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B2 AArch64 system registers 
B2.93 SCTLR_EL3, System Control Register, EL3 


Global enable for the EL3 MMU. The possible values are: 


e Disables EL3 MMU. This is the reset value. 
1 Enables EL3 MMU. 
Configurations 


There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.94 TCR_EL1, Translation Control Register, EL1 


B2.94 TCR_EL1, Translation Control Register, EL1 


The TCR_EL1 determines which Translation Base registers define the base address register for a 
translation table walk required for stage | translation of a memory access from ELO or EL] and holds 
cacheability and shareability information. 


Bit field descriptions 
TCR_ELI is a 64-bit meee, and is pat of the Virtual memory control registers functional group. 


















































































































































63 : '51 50 49 48.47 46 45 44.43 42 41 40:39 38 37 363534 32 
HWwu162— LAS 
Hwu161 — _TBIO 
Hwu160— LTB 
LHA 
LUD 
_HPDO 
HPD1 
__HWwu059 
L_ HWU060 
__HWwu061 
L_ HWwUu062 
L Hwu159 
'31 30 29 28.27 26 2524232221 | 161514131211109 8:7 65 | 0: 
TG1 | SH1 | At T1SZ TGO | SHO | TOSZ 
ORGN1 — _EPD 
IRGN1— LIRGNO 
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RESO 


Figure B2-78 TCR_EL1 bit assignments 





Note 
Bits[50:39], architecturally defined, are implemented in the core. 


HD, [40] 
Hardware management of dirty state in stage | translations from ELO and EL1. The possible 
values are: 
) Stage | hardware management of dirty state disabled. 
1 Stage | hardware management of dirty state enabled, only if the HA bit is also set to 1. 
HA, [39] 
Hardware Access flag update in stage 1 translations from ELO and EL1. The possible values are: 
) Stage | Access flag update disabled. 
1 Stage | Access flag update enabled. 
Configurations 


RW fields in this register reset to UNKNOWN values. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv6, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.95 TCR_EL2, Translation Control Register, EL2 


B2.95 TCR_EL2, Translation Control Register, EL2 


The TCR_EL2 controls translation table walks required for stage | translation of a memory access from 
EL2 and holds cacheability and shareability information. 


Bit field descriptions 
TCR_EL2 is a 32-bit register. 


TCR_EL2 is part of: 
¢ The Virtual memory control registers functional group. 
¢ The Hypervisor and virtualization registers functional group. 


31 30 29 28 25 24 23 2221201918 161514131211109 8 7 6 5 


L_IRGNO 
TBI ORGNO 





HA 
RESO HD 
RES1 HPD 
Figure B2-79 TCR_EL2 bit assignments 
Note 





Bits[28:21], architecturally defined, are implemented in the core. 





HD, [22] 
Dirty bit update. The possible values are: 
) Dirty bit update is disabled. 
1 Dirty bit update is enabled. 
HA, [21] 
Stage 1 Access flag update. The possible values are: 
) Stage | Access flag update is disabled. 
1 Stage | Access flag update is enabled. 
Configurations 


When the Virtualization Host Extension is activated, TCR_EL2 has the same bit assignments as 
TCR ELI. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv6, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.96 TCR_EL3, Translation Control Register, EL3 


B2.96 TCR_EL3, Translation Control Register, EL3 


The TCR_EL3 controls translation table walks required for stage | translation of memory accesses from 
EL3 and holds cacheability and shareability information for the accesses. 


Bit field descriptions 
TCR_EL3 is a 32-bit register and is part of the Virtual memory control registers functional group. 


31 30 29 28 27 26 25 24 23 22 21201918 161514131211109 8 7 6 5 0 
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Figure B2-80 TCR_EL3 bit assignments 
Note 


Bits[28:21], architecturally defined, are implemented in the core. 





HD, [22] 
Dirty bit update. The possible values are: 
7) Dirty bit update is disabled. 
1 Dirty bit update is enabled. 
HA, [21] 
Stage 1 Access flag update. The possible values are: 
) Stage | Access flag update is enabled. 
1 Stage 1 Access flag update is disabled. 
Configurations 


There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv6, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.97 TTBRO_EL1, Translation Table Base Register 0, EL1 


B2.97 TTBRO_EL1, Translation Table Base Register 0, EL1 


The TTBRO_EL1 holds the base address of translation table 0, and information about the memory it 
occupies. This is one of the translation tables for the stage | translation of memory accesses from modes 
other than Hyp mode. 


Bit field descriptions 
TTBRO_ELI is 64-bit register. 


63 48 47 10 


ASID BADDR[47:x] 


Cnp— 


Figure B2-81 TTBRO_EL1 bit assignments 
ASID, [63:48] 


An ASID for the translation table base address. The TCR_EL1.A1 field selects either 
TTBRO_EL1.ASID or TTBR1_EL1.ASID. 


BADDR[47:x], [47:1] 
Translation table base address, bits[47:x]. Bits [x-1:1] are REso. 


x is based on the value of TCR_EL1.TOSZ, the stage of translation, and the memory translation 
granule size. 


For instructions on how to calculate it, see the Arm® Architecture Reference Manual Armvé, for 
Armvs-A architecture profile. 


The value of x determines the required alignment of the translation table, that must be aligned to 
2* bytes. 


If bits [x-1:1] are not all zero, this is a misaligned translation table base address. Its effects are 
CONSTRAINED UNPREDICTABLE, Where bits [x-1:1] are treated as if all the bits are zero. The value 
read back from those bits is the value written. 


CnP, [0] 
Common not Private. The possible values are: 


) CnP is not supported. 
1 CnP is supported. 


Configurations 
There are no configuration notes. 
Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile. 





100798 _0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights B2-283 
reserved. 
Non-Confidential 


B2 AArch64 system registers 
B2.98 TTBRO_EL2, Translation Table Base Register 0, EL2 


B2.98 TTBRO_EL2, Translation Table Base Register 0, EL2 


The TTBRO_EL2 holds the base address of the translation table for the stage 1 translation of memory 
accesses from EL2. 


Bit field descriptions 


TTBRO_EL2 is a 64-bit register, and is part of the Virtual memory control registers functional group. 


63 48 47 10 


BADDR[47:x] 


Cnp— 
RESO 


Figure B2-82 TTBRO_EL2 bit assignments 
RESO, [63:48] 


RESO Reserved. 


BADDR, [47:1] 
Translation table base address, bits[47:x]. Bits [x-1:1] are REso. 


x is based on the value of TCR_EL2.TOSZ, the stage of translation, and the memory translation 
granule size. 


For instructions on how to calculate it, see the Arm® Architecture Reference Manual Arm®v8, for 
Arm®v8-A architecture profile. 


The value of x determines the required alignment of the translation table, that must be aligned to 
2* bytes. 


If bits [x-1:1] are not all zero, this is a misaligned translation table base address. Its effects are 
CONSTRAINED UNPREDICTABLE, Where bits [x-1:1] are treated as if all the bits are zero. The value 
read back from those bits is the value written. 


CnP, [0] 
Common not Private. The possible values are: 


) CnP is not supported. 
1 CnP is supported. 


Configurations 


When the Virtualization Host Extension is activated, TTBRO EL2 has the same bit assignments 
as TTBRO_ ELI. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.99 TTBRO_EL3, Translation Table Base Register 0, EL3 


B2.99 TTBRO_EL3, Translation Table Base Register 0, EL3 


The TTBRO_EL3 holds the base address of the translation table for the stage 1 translation of memory 
accesses from EL3. 


Bit field descriptions 
TTBRO_EL3 is a 64-bit register. 


63 48 47 10 


BADDR[47:x] 


Cnp— 
RESO 


Figure B2-83 TTBRO_EL3 bit assignments 
[63:48] 
Reserved, RESO. 
BADDR[47:x], [47:1] 
Translation table base address, bits[47:x]. Bits [x-1:1] are REso. 


x is based on the value of TCR_EL1.TOSZ, the stage of translation, and the memory translation 
granule size. 


For instructions on how to calculate it, see the Arm® Architecture Reference Manual Armvé, for 
Armvs-A architecture profile. 


The value of x determines the required alignment of the translation table, that must be aligned to 
2* bytes. 


If bits [x-1:1] are not all zero, this is a misaligned translation table base address. Its effects are 
CONSTRAINED UNPREDICTABLE, Where bits [x-1:1] are treated as if all the bits are zero. The value 
read back from those bits is the value written. 


CnP, [0] 
Common not Private. The possible values are: 


) CnP is not supported. 
1 CnP is supported. 


Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.100 TTBR1_EL1, Translation Table Base Register 1, EL1 


B2.100 TTBR1_EL1, Translation Table Base Register 1, EL1 


The TTBR1_EL1 holds the base address of translation table 1, and information about the memory it 
occupies. This is one of the translation tables for the stage | translation of memory accesses at ELO and 
ELI. 


Bit field descriptions 
TTBRI1_ EL] is a 64-bit register. 


63 48 47 10 


ASID BADDR[47:x] 


CnPp— 


Figure B2-84 TTBR1_EL1 bit assignments 
ASID, [63:48] 


An ASID for the translation table base address. The TCR_EL1.A1 field selects either 
TTBRO_EL1.ASID or TTBR1_EL1.ASID. 


BADDR[47:x], [47:1] 
Translation table base address, bits[47:x]. Bits [x-1:0] are REso. 


x is based on the value of TCR_EL1.TOSZ, the stage of translation, and the memory translation 
granule size. 


For instructions on how to calculate it, see the Arm® Architecture Reference Manual Armvé, for 
Armvs-A architecture profile. 


The value of x determines the required alignment of the translation table, that must be aligned to 
2* bytes. 


If bits [x-1:1] are not all zero, this is a misaligned Translation Table Base Address. Its effects are 
CONSTRAINED UNPREDICTABLE, Where bits [x-1:1] are treated as if all the bits are zero. The value 
read back from those bits is the value written. 


CnP, [0] 
Common not Private. The possible values are: 


) CnP is not supported. 
1 CnP is supported. 


Configurations 
There are no configuration notes. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.101 TTBR1_EL2, Translation Table Base Register 1, EL2 


B2.101 TTBR1_EL2, Translation Table Base Register 1, EL2 
TTBRI1_EL2 has the same format and contents as TTBR1_ ELI. 
See B2.100 TTBR1_ELI, Translation Table Base Register 1, EL] on page B2-286. 
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B2 AArch64 system registers 
B2.102 VDISR_EL2, Virtual Deferred Interrupt Status Register, EL2 


B2.102 VDISR_EL2, Virtual Deferred Interrupt Status Register, EL2 


The VDISR_EL2 records that a virtual SError interrupt has been consumed by an ESB instruction 
executed at Non-secure EL1. 


Bit field descriptions 


VDISR_EL2 is a 64-bit register, and is part of the Reliability, Availability, Serviceability (RAS) registers 
functional group. 


Configurations 
See B2.102.1 VDISR_EL2 at EL1 using AArch64 on page B2-288. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


This section contains the following subsection: 
* B2.102.1 VDISR_EL2 at EL1 using AArch64 on page B2-288. 


B2.102.1 VDISR_EL2 at EL1 using AArch64 
VDISR_EL2 has a specific format when written at EL1. 
The following figure shows the VDISR_EL2 bit assignments when written at EL1 using AArch64: 


63 : 32:31 30 : 25 24 23 0 


L_Ips 
RESO 


Figure B2-85 VDISR_EL2 at EL1 using AArch64 

RESO, [63:32] 

RESO Reserved. 
A, [31] 

Set to 1 when ESB defers an asynchronous SError interrupt. 
RESO, [30:25] 

RESO Reserved. 
IDS, [24] 

Contains the value from VSESR_EL2.IDS. 
ISS, [23:0] 

Contains the value from VSESR_EL2, bits[23:0]. 
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B2 AArch64 system registers 
B2.103 VSESR_EL2, Virtual SError Exception Syndrome Register 


B2.103 VSESR_EL2, Virtual SError Exception Syndrome Register 


The VSESR_EL2 provides the syndrome value reported to software on taking a virtual SError interrupt 
exception. 


Bit field descriptions 

VSESR_EL2 is a 64-bit register, and is part of: 

¢ The Exception and fault handling registers functional group. 
¢ The Virtualization registers functional group. 


If the virtual SError interrupt is taken to EL1, VSESR_EL2 provides the syndrome value reported in 
ESR_EL1. 


VSESR_EL2 bit assignments 


63 25 24 23 0 
| ISS | 
L_|ps 
RESO 


Figure B2-86 VSESR_EL2 bit assignments 
RESO, [63:25] 


RESO Reserved. 


IDS, [24] 


Indicates whether the deferred SError interrupt was of an IMPLEMENTATION DEFINED type. See 
ESR_EL1.IDS for a description of the functionality. 


On taking a virtual SError interrupt to EL1 using AArch64 because HCR_EL2.VSE = 1, 
ESR_EL1[24] is set to VSESR_EL2.IDS. 


ISS, [23:0] 
Syndrome information. See ESR_EL1.ISS for a description of the functionality. 


On taking a virtual SError interrupt to EL1 using AArch32 due to HCR_EL2.VSE == 1, 
ESR_EL!1 [23:0] is set to VSESR_EL2.ISS. 


Configurations 
There are no configuration notes. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.104 VTCR_EL2, Virtualization Translation Control Register, EL2 


B2.104 VTCR_ELZ, Virtualization Translation Control Register, EL2 


The VTCR_EL2 controls the translation table walks required for the stage 2 translation of memory 
accesses from Non-secure ELO and EL1. 


It also holds cacheability and shareability information for the accesses. 


Bit field descriptions 

VTCR_EL2 is a 32-bit register, and is part of: 

¢ The Virtualization registers functional group. 

¢ The Virtual memory control registers functional group. 


31 30 29 28 27 26 25 24 23 22 21201918 161514131211109 8 7 6 5 
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Figure B2-87 VTCR_EL2 bit assignments 
Note 
Bits[28:25] and bits[22:21], architecturally defined, are implemented in the core. 








TGO, [15:14] 


TTBRO_EL2 granule size. The possible values are: 


ee 4KB. 

@1 64KB. 

10 16KB. 

11 Reserved. 


All other values are not supported. 
Configurations 
RW fields in this register reset to architecturally UNKNOWN values. 


Bit fields and details that are not provided in this description are architecturally defined. See the 
Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 





100798 _0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights B2-290 
reserved. 
Non-Confidential 


B2 AArch64 system registers 
B2.105 VTTBR_EL2, Virtualization Translation Table Base Register, EL2 


B2.105 VTTBR_EL2, Virtualization Translation Table Base Register, EL2 


VTTBR_EL2 holds the base address of the translation table for the stage 2 translation of memory 
accesses from Non-secure ELO and EL1. 


Bit field descriptions 
VTTBR_EL2? is a 64-bit register. 


63 48:47 4 3 1 


VMID BADDR 


cnp 
RESO 


Figure B2-88 VTTBR_EL2 bit assignments 
CnP, [0] 


Common not Private. The possible values are: 


) CnP is not supported. 
1 CnP is supported. 


Configurations 
There are no configuration notes. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
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B2 AArch64 system registers 
B2.105 VITBR_EL2, Virtualization Translation Table Base Register, EL2 
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Chapter B3 
Error system registers 


This chapter describes the error registers accessed by the AArch64 error registers. 


It contains the following sections: 

¢ B3.1 Error system register summary on page B3-294. 

¢ B3.2 ERROADDR, Error Record Address Register on page B3-295. 

¢ B3.3 ERROCTLR, Error Record Control Register on page B3-296. 

¢ B3.4 ERROFR, Error Record Feature Register on page B3-298. 

¢ B3.5 ERROMISCO0, Error Record Miscellaneous Register 0 on page B3-300. 

¢ B3.6 ERROMISCI, Error Record Miscellaneous Register I on page B3-303. 

¢ B3.7 ERROPFGCDNR, Error Pseudo Fault Generation Count Down Register on page B3-304. 
¢ B3.8 ERROPFGCTLR, Error Pseudo Fault Generation Control Register on page B3-305. 
¢ B3.9 ERROPFGFR, Error Pseudo Fault Generation Feature Register on page B3-307. 

¢ B3.10 ERROSTATUS, Error Record Primary Status Register on page B3-309. 
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B3 Error system registers 
B3.1 Error system register summary 





















































B3.1 Error system register summary 
This section identifies the ERRO* core error record registers accessed by the AArch64 ERX* error 
registers. 
The ERRO* registers are agnostic to the architectural state. For example, this means that for 
ERRSELR==0 and ERRSELR_EL1==0, ERXPFGFR and ERXPFGFR_EL1 will both access 
ERROPFGER. 
For those registers not described in this chapter, see the Arm® Architecture Reference Manual Armv8, for 
Armv8-A architecture profile. 
The following table describes the architectural error record registers. 
Table B3-1 Architectural error system register summary 
Register Size | Register name Access aliases from AArch64 
mnemonic 
ERROADDR 64 B3.2 ERROADDR, Error Record Address B2.39 ERXADDR_EL1, Selected Error Record Address 
Register on page B3-295 Register, ELI on page B2-200 
ERROCTLR 64 B3.3 ERROCTLR, Error Record Control B2.40 ERXCTLR_EL1, Selected Error Record Control 
Register on page B3-296 Register, ELI on page B2-201 
ERROFR 64 | B3.4 ERROFR, Error Record Feature Register | B2.41 ERXFR_EL1, Selected Error Record Feature 
on page B3-298 Register, EL] on page B2-202 
ERROMISCO 64 B3.5 ERROMISC0, Error Record B2.42 ERXMISCO_EL1, Selected Error Record 
Miscellaneous Register 0 on page B3-300 Miscellaneous Register 0, ELI on page B2-203 
ERROMISC1 64 | B3.6 ERROMISCI, Error Record B2.43 ERXMISC1_EL1, Selected Error Record 
Miscellaneous Register 1 on page B3-303 Miscellaneous Register 1, ELI on page B2-204 
ERROSTATUS 32 | B3.10 ERROSTATUS, Error Record Primary B2.47 ERXSTATUS_EL1, Selected Error Record Primary 
Status Register on page B3-309 Status Register, ELI on page B2-209 
The following table describes the error record registers that are IMPLEMENTATION DEFINED. 
Register Size | Register name Access aliases from AArch64 
mnemonic 
ERROPFGCDNR 32 | B3.7 ERROPFGCDNR, Error Pseudo Fault B2.44 ERXPFGCDNR_ELI, Selected Error Pseudo 
Generation Count Down Register Fault Generation Count Down Register, EL1 
on page B3-304 on page B2-205 
ERROPFGCTLR 32. | B3.8 ERROPFGCTLR, Error Pseudo Fault B2.45 ERXPFGCTLR_EL1, Selected Error Pseudo 
Generation Control Register on page B3-305__| Fault Generation Control Register, EL1 
on page B2-206 
ERROPFGFR 32 | B3.9 ERROPFGFR, Error Pseudo Fault B2.46 ERXPFGFR_EL1, Selected Pseudo Fault 
Generation Feature Register on page B3-307 | Generation Feature Register, EL] on page B2-208 
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B3 Error system registers 
B3.2 ERROADDR, Error Record Address Register 


B3.2 ERROADDR, Error Record Address Register 
The ERROADDR stores the address that is associated to an error that is recorded. 


Bit field descriptions 


ERROADDR 1s a 64-bit register, and is part of the Reliability, Availability, Serviceability (RAS) registers 
functional group. 


63 62 > 4039 0 
| PADDR 
_ NS 
RESO 


Figure B3-1 ERROADDR bit assignments 

NS, [63] 

Non-secure attribute. The possible values are: 

@ The physical address is Secure. 

1. The physical address is Non-secure. 
RESO, [62:40] 

RESO Reserved. 
PADDR, [39:0] 

Physical address. 
Configurations 

ERROADDR resets to UNKNOWN. 


When ERRSELR.SEL==0, this register is accessible from B2.39 ERXADDR_EL1I, Selected 
Error Record Address Register, EL1 on page B2-200. 
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B3 Error system registers 
B3.3 ERROCTLR, Error Record Control Register 


B3.3 ERROCTLR, Error Record Control Register 


The ERROCTLR contains enable bits for the node that writes to this record: 


¢ Enabling error detection and correction. 

¢ Enabling an error recovery interrupt. 

¢ Enabling a fault handling interrupt. 

¢ Enabling error recovery reporting as a read or write error response. 


Bit field descriptions 


ERROCTLR is a 64-bit register and is part of the Reliability, Availability, Serviceability (RAS) registers 
functional group. 


ERROCTLR resets to CFI [8], FI [3], and UI [2] are UNkNown. The rest of the register is RESO. 


63 9 8 7 43 2 1 0 


CFI— 





























FIX 
ul 








ED— 
RESO 


Figure B3-2  ERROCTLR bit assignments 


RESO, [63:9] 


CFI, [8] 


RESO Reserved. 


Fault handling interrupt for corrected errors enable. 


The fault handling interrupt is generated when one of the standard CE counters on ERROMISCO 
overflows and the overflow bit is set. The possible values are: 
7) Fault handling interrupt not generated for corrected errors. 
1 Fault handling interrupt generated for corrected errors. 
The interrupt is generated even if the error status is overwritten because the error record already 
records a higher priority error. 
Note 
This applies to both reads and writes. 








RESO, [7:4] 


FI, [3] 


RESO Reserved. 


Fault handling interrupt enable. 


The fault handling interrupt is generated for all detected Deferred errors and Uncorrected errors. 
The possible values are: 





) Fault handling interrupt disabled. 
1 Fault handling interrupt enabled. 
UL, [2] 
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B3 Error system registers 
B3.3 ERROCTLR, Error Record Control Register 


Uncorrected error recovery interrupt enable. When enabled, the error recovery interrupt is 
generated for all detected Uncorrected errors that are not deferred. The possible values are: 


) Error recovery interrupt disabled. 
1 Error recovery interrupt enabled. 
Note 





Applies to both reads and writes. 





RESO, [1] 
RESO Reserved. 
ED, [0] 


Error Detection and correction enable. The possible values are: 


(7) Error detection and correction disabled. 
1 Error detection and correction enabled. 
Configurations 


This register is accessible from the following registers when ERRSELR.SEL==0: 
B2.40 ERXCTLR_ELI, Selected Error Record Control Register, ELI on page B2-201. 
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B3 Error system registers 
B3.4 ERROFR, Error Record Feature Register 


B3.4 ERROFR, Error Record Feature Register 


The ERROFR defines which of the common architecturally defined features are implemented and, of the 
implemented features, which are software programmable. 
Bit field descriptions 


ERROFR is a 64-bit register, and is part of the Reliability, Availability, Serviceability (RAS) registers 
functional group. 


The register is Read Only. 





63 20 19 18 17 16 15 14 1211109 8 765 43 2 1 
L_Rp 
RESO 
Figure B3-3 ERROFR bit assignments 
[63:20] 
RESO 
Reserved. 


CEO, [19:18] 
Corrected Error Overwrite. The value is: 
ee Counts CE if a counter is implemented and keeps the previous error status. If the 
counter overflows, ERROSTATUS.OF is set to 1. 
DUI, [17:16] 
Error recovery interrupt for deferred errors. The value is: 


ee The core does not support this feature. 


RP, [15] 
Repeat counter. The value is: 
1 A first repeat counter and a second other counter are implemented. The repeat counter 


is the same size as the primary error counter. 


CEC, [14:12] 
Corrected Error Counter. The value is: 


e108 The node implements an 8-bit standard CE counter in ERROMISC0[39:32]. 


CFI, [11:10] 
Fault handling interrupt for corrected errors. The value is: 





10 The node implements a control for enabling fault handling interrupts on corrected 
errors. 

UE, [9:8] 
In-band uncorrected error reporting. The value is: 
e1 The node implements in-band uncorrected error reporting, that is external aborts. 

FI, [7:6] 
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B3 Error system registers 
B3.4 ERROFR, Error Record Feature Register 


Fault handling interrupt. The value is: 
10 The node implements a fault handling interrupt and implements controls for enabling 
and disabling. 
UL, [5:4] 
Error recovery interrupt for uncorrected errors. The value is: 


10 The node implements an error recovery interrupt and implements controls for enabling 
and disabling. 


[3:2] 


RESO 
Reserved. 


ED, [1:0] 
Error detection and correction. The value is: 


10 The node implements controls for enabling or disabling error detection and correction. 


Configurations 
ERROFR resets to 0x080080880800A9A2 
ERROFR is accessible from the following registers when ERRSELR.SEL==0: 


B2.41 ERXFR_EL1, Selected Error Record Feature Register, ELI on page B2-202. 





100798 _0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights B3-299 
reserved. 
Non-Confidential 


B3 Error system registers 
B3.5 ERROMISCO, Error Record Miscellaneous Register 0 


B3.5 ERROMISCO, Error Record Miscellaneous Register 0 


The ERROMISCO is an error syndrome register. It contains corrected error counters, information to 
identify where the error was detected, and other state information not present in the corresponding status 
and address error record registers. 


Bit field descriptions 


ERROMISCO is a 64-bit register, and is part of the Reliability, Availability, Serviceability (RAS) registers 
functional group. 


48 47 46 40 39 38 32 31 28 27 26 25 24 23 22 19 18 65 43 


L_ SUBARRAY L_ ARRAY 
Lda 
SUBBANK 


RESO 


Figure B3-4 ERROMISCO bit assignments 
[63:48] 
Reserved, RESO. 
OFO, [47] 
Sticky overflow bit, other. The possible values of this bit are: 
7) Other counter has not overflowed. 


1 Other counter has overflowed. 


The fault handling interrupt is generated when the corrected fault handling interrupt is enabled 
and either overflow bit is set to 1. 


CECO, [46:40] 


Corrected error count, other. Incremented for each Corrected error that does not match the 
recorded syndrome. 


This field resets to an IMPLEMENTATION DEFINED which might be UNKNOWN on a Cold reset. If the 
reset value is UNKNOWN, then the value of this field remains UNKNOWN until software initializes it. 


OFR, [39] 
Sticky overflow bit, repeat. The possible values of this bit are: 
7) Repeat counter has not overflowed. 


1 Repeat counter has overflowed. 


The fault handling interrupt is generated when the corrected fault handling interrupt is enabled 
and either overflow bit is set to 1. 
CECR, [38:32] 


Corrected error count, repeat. Incremented for the first recorded error, which also records other 
syndromes, and then again for each Corrected error that matches the recorded syndrome. 


This field resets to an IMPLEMENTATION DEFINED which might be UNKNOWN on a Cold reset. If the 
reset value is UNKNOWN, then the value of this field remains UNKNOWN until software initializes it. 


WAY, [31:28] 
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[27:26] 


B3 Error system registers 
B3.5 ERROMISCO, Error Record Miscellaneous Register 0 


The encoding is dependent on the unit from which the error being recorded was detected. The 
possible values are: 


L1 Data Indicates which Tag RAM way or data RAM way detected the error. Upper 2 

Cache bits are unused. 

L2 TLB Indicates which RAM has an error. The possible values are 0 (RAM 1) to 9 
(RAM 10). 


L1 Instruction Indicates which way has the error. Upper 2 bits are unused. 
Cache 


Reserved, RESO. 


SUBBANK, [25] 


BANK, 


The encoding is dependent on the unit from which the error being recorded was detected. The 
possible values are: 


L1 Instruction Indicates which subbank has the error, valid for Instruction Data Cache. For 
Cache Tag errors this field is zero. 

[24:23] 

The encoding is dependent on the unit from which the error being recorded was detected. The 


possible values are: 


L2 Cache Indicates which L2 bank detected the error. Upper | bit is unused. 


L1 Instruction Indicates which bank has the error, valid for Instruction Data Cache. For Tag 
Cache errors this field is zero. 


SUBARRAY, [22:19] 


The encoding is dependent on the unit from which the error being recorded was detected. The 
possible values are: 


L2 Cache Indicates which L2 Tag way or data doubleword detected the error. Upper | bit 


is unused. 
L1 Data Indicates for L1 Data RAM which word had the error detected. For L1 Tag 
Cache RAMs which bank had the error (@b@000: bank0 , @b@ee1: bank!) 


INDEX, [18:6] 


The encoding is dependent on the unit from which the error being recorded was detected. The 
possible values are: 


L2 Cache Indicates which index detected the error. Upper bits of the index are unused 
depending on the cache size. 

L1 Data Indicates which index detected the error. Upper bits of the index are unused 

Cache depending on the cache size. 

L2 TLB Index of TLB RAM. Upper 4 bits are unused. 

L1 Instruction Indicates which index has the error. Upper bits of the index are unused 

Cache depending on the cache size. 

ARRAY, [5:4] 


The encoding is dependent on the unit from which the error being recorded was detected. The 
possible values are: 


L2 Cache Indicates which array has the error. The possible values are: 


@bee@ 12 Tag RAM. 
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L1 Data 
Cache 


L1 Instruction 
Cache 


UNIT, [3:0] 
Indicates the unit which detected the error. The possible values are: 


0b1000 
0be100 
0be010 
@bee001 


Configurations 

ERROMISCO resets to [63:32] is 0x90000008, [31:0] is UNKNOWN. 

This register is accessible from the following registers when ERRSELR.SEL==0: 

¢ B2.42 ERXMISCO_EL1, Selected Error Record Miscellaneous Register 0, ELI 
on page B2-203. 


B3 Error system registers 
B3.5 ERROMISCO, Error Record Miscellaneous Register 0 
@be1 = L2 Data RAM. 
@b1@ TQ Data RAM. 
@b11 CHI Slave Error. 


Indicates which array detected the error. The possible values are: 


@bee LSO copy of Tag RAM. 

@be1 LSI copy of Tag RAM. 

@b1e@ LS Tag RAM. 

Indicates which array that detected the error, Data Array has higher priority. 
The possible values are: 

@be Tag. 

@b1 ~— Data. 


L2 Cache. 

L1 Data Cache. 

L2 TLB. 

L1 Instruction Cache. 
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B3 Error system registers 
B3.6 ERROMISC1, Error Record Miscellaneous Register 1 


B3.6 ERROMISC1, Error Record Miscellaneous Register 1 
This register is unused in the Cortex-A76 core and marked as REso. 


Configurations 


When ERRSELR.SEL==0, ERROMISC1 is accessible from B2.43 ERXMISCI1_ELI, Selected Error 
Record Miscellaneous Register 1, ELI on page B2-204. 





100798 _0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights B3-303 
reserved. 
Non-Confidential 


B3 Error system registers 
B3.7 ERROPFGCDNR, Error Pseudo Fault Generation Count Down Register 


B3.7 ERROPFGCDNR, Error Pseudo Fault Generation Count Down Register 


ERROPFGCDNR is the Cortex-A76 node register that generates one of the errors that are enabled in the 
corresponding ERROPFGCTL register. 


Bit field descriptions 
ERROPFGCDNR is a 32-bit register and is RW. 


31 0 


Figure B3-5 ERROPFGCDNR bit assignments 


CDN, [31:0] 
Count Down value. The reset value of the Error Generation Counter is used for the countdown. 


Configurations 
There are no configuration options. 
ERROPFGCDNR resets to UNKNOWN. 


When ERRSELR.SEL==0, ERROPFGCDNR is accessible from B2.44 ERXPFGCDNR_ELI, 
Selected Error Pseudo Fault Generation Count Down Register, EL1 on page B2-205. 
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B3 Error system registers 
B3.8 ERROPFGCTLR, Error Pseudo Fault Generation Control Register 


B3.8 ERROPFGCTLR, Error Pseudo Fault Generation Control Register 
The ERROPFGCTLR is the Cortex-A76 node register that enables controlled fault generation. 


Bit field descriptions 
ERROPFGCTLR is a 32-bit read/write register. 


31 30 29 765 4 2 1 0 


L_R CE— 
CDNEN DE 


UC 


RESO 


Figure B3-6 ERROPFGCTLR bit assignments 
CDNEN, [31] 


Count down enable. This bit controls transfers from the value that is held in the 
ERROPFGCDNR into the Error Generation Counter and enables this counter to start counting 
down. The possible values are: 


(7) The Error Generation Counter is disabled. 


1 The value that is held in the ERROPFGCDNR register is transferred into the 
Error Generation Counter. The Error Generation Counter counts down. 


R, [30] 


Restartable bit. When it reaches 0, the Error Generation Counter restarts from the 
ERROPFGCDNR value or stops. The possible values are: 





) When it reaches 0, the counter stops. 
1 When it reaches 0, the counter reloads the value that is stored in ERROPFGCDNR 
and starts counting down again. 
[29:7] 
Reserved, RESO. 
CE, [6] 
Corrected error generation enable. The possible values are: 
) No corrected error is generated. 
1 A corrected error might be generated when the Error Generation Counter is 
triggered. 
DE, [5] 
Deferred Error generation enable. The possible values are: 
) No deferred error is generated. 
1 A deferred error might be generated when the Error Generation Counter is 
triggered. 
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B3 Error system registers 
B3.8 ERROPFGCTLR, Error Pseudo Fault Generation Control Register 


[4:2] 
Reserved, RESO. 
UGC, [1] 
Uncontainable error generation enable. The possible values are: 
) No uncontainable error is generated. 
1 An uncontainable error might be generated when the Error Generation Counter is 
triggered. 
[0] 
Reserved, RESO. 
Configurations 


There are no configuration notes. 
ERROPFGCTLR resets to 0x@0000000. 


ERROPFGCTLR is accessible from the following registers when ERRSELR.SEL==0: 


¢ B2.45 ERXPFGCTLR_ELI, Selected Error Pseudo Fault Generation Control Register, EL1 
on page B2-206. 
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B3 Error system registers 
B3.9 ERROPFGFR, Error Pseudo Fault Generation Feature Register 


B3.9 ERROPFGFR, Error Pseudo Fault Generation Feature Register 


The ERROPFGER is the Cortex-A76 node register that defines which fault generation features are 
implemented. 


Bit field descriptions 
ERROPFGER is a 32-bit register and is RO. 


31 30 29 76543210 
L_R CcE— 
PFG DE 


RESO 


Figure B3-7 ERROPFGFR bit assignments 
PFG, [31] 
Pseudo Fault Generation. The value is: 
1 The node implements a fault injection mechanism. 
R, [30] 


Restartable bit. When it reaches zero, the Error Generation Counter restarts from the 
ERROPFGCDN value or stops. The value is: 





1 This feature is controllable. 
[29:7] 
RESO Reserved. 
CE, [6] 
Corrected Error generation. The value is: 
1 This feature is controllable. 
DE, [5] 
Deferred Error generation. The value is: 
1 This feature is controllable. 
UEO, [4] 
Latent or Restartable Error generation. The value is: 
) The node does not support this feature. 
UER, [3] 
Signaled or Recoverable Error generation. The value is: 
) The node does not support this feature. 
UEU, [2] 
Unrecoverable Error generation. The value is: 
) The node does not support this feature. 
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B3 Error system registers 
B3.9 ERROPFGFR, Error Pseudo Fault Generation Feature Register 


UC, [1] 
Uncontainable Error generation. The value is: 


1 This feature is controllable. 


[0] 
RESO Reserved. 

Configurations 
There are no configuration notes. 
ERROPFGER resets to 8xC@000062. 


When ERRSELR.SEL==0, ERROPFGFR is accessible from B2.46 ERXPFGFR_EL1, Selected 
Pseudo Fault Generation Feature Register, ELI on page B2-208. 
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B3 Error system registers 
B3.10 ERROSTATUS, Error Record Primary Status Register 


B3.10 ERROSTATUS, Error Record Primary Status Register 
The ERROSTATUS contains information about the error record: 


¢ Whether any error has been detected. 

¢« Whether any detected error was not corrected and returned to a master. 

¢ Whether any detected error was not corrected and deferred. 

« Whether a second error of the same type was detected before software handled the first error. 
¢ Whether any error has been reported. 

¢ Whether the other error record registers contain valid information. 

Bit field descriptions 


ERROSTATUS is a 32-bit register. 


31 30 29 28 27 26 25 24 23 22 21 20.19 5 4 0 


AV— L_UET 
V PN 
UE DE 


ER 
OF 
MV 


RESO 


Figure B3-8 ERROSTATUS bit assignments 
AV, [31] 
Address Valid. The possible values are: 


@ ERROADDR is not valid. 


1 ERROADDR contains an address associated with the highest priority error recorded by this 
record. 


V, [30] 
Status Register valid. The possible values are: 


@ ERROSTATUS is not valid. 

1 ERROSTATUS is valid. At least one error has been recorded. 
UE, [29] 

Uncorrected error. The possible values are: 

@ No error that could not be corrected or deferred has been detected. 


1 At least one error that could not be corrected or deferred has been detected. If error recovery 
interrupts are enabled, then the interrupt signal is asserted until this bit is cleared. 


ER, [28] 
Error reported. The possible values are: 


®@ No external abort has been reported. 


1 The node has reported an external abort to the master that is in access or making a 
transaction. 
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B3 Error system registers 
B3.10 ERROSTATUS, Error Record Primary Status Register 


OF, [27] 
Overflow. The possible values are: 


@¢ IfUE= 1, then no error status for an Uncorrected error has been discarded. 
¢ IfUE==0 and DE == 1, then no error status for a Deferred error has been discarded. 
« IfUE==0, DE = 0, and CE !== @be@, then: 


The corrected error counter has not overflowed. 
1 More than one error has occurred and so details of the other error have been discarded. 
MV, [26] 
Miscellaneous Registers Valid. The possible values are: 
@ ERROMISCO and ERROMISC1 are not valid. 


1 This bit indicates that ERROMISCO contains additional information about any error that is 
recorded by this record. 


CE, [25:24] 

Corrected error. The possible values are: 

@bee No corrected error recorded. 

@b10 At least one corrected error recorded. 
DE, [23] 


Deferred error. The possible values are: 
®@ No errors were deferred. 
1 At least one error was not corrected and deferred by poisoning. 
PN, [22] 
Poison. The value is: 
@ The Cortex-A76 core cannot distinguish a poisoned value from a corrupted value. 


UET, [21:20] 
Uncorrected Error Type. The value is: 





e@bee Uncontainable. 

[19:5] 
RESO. 

Reserved. 

SERR, [4:0] 
Primary error code. The possible values are: 
@x@ No error. 
@x1_ Errors due to fault injection. 
@x2 ECC error from internal data buffer. 
@x6 ECC error on cache data RAM. 
@x7 ECC error on cache tag or dirty RAM. 
@x8 Parity error on TLB data RAM. 
@x12 Error response for a cache copyback. 
@x15 Deferred error from slave not supported at the consumer. For example, poisoned data 

received from a slave by a master that cannot defer the error further. 
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B3 Error system registers 
B3.10 ERROSTATUS, Error Record Primary Status Register 


Configurations 
There are no configuration notes. 
ERROSTATUS resets to 0x00000000. 


ERROSTATUS is accessible from the following registers when ERRSELR.SEL==0: 


¢ B2.47 ERXSTATUS_EL1, Selected Error Record Primary Status Register, EL1 
on page B2-209. 
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B3 Error system registers 
B3.10 ERROSTATUS, Error Record Primary Status Register 
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Chapter B4 
GIC registers 


This chapter describes the GIC registers. 


It contains the following sections: 
¢ B4.1 CPU interface registers on page B4-315. 
¢ B4.2 AArch64 physical GIC CPU interface system register summary on page B4-316. 
¢ B4.3ICC_APORO_EL1, Interrupt Controller Active Priorities Group 0 Register 0, ELI 
on page B4-317. 
¢ B4.4ICC_APIRO_ELI, Interrupt Controller Active Priorities Group I Register 0 EL1 
on page B4-318. 
© B4.5ICC_BPRO_ELI, Interrupt Controller Binary Point Register 0, EL1 on page B4-319. 
¢ B4.6ICC_BPRI_ELI, Interrupt Controller Binary Point Register 1, EL1 on page B4-320. 
© B4.7ICC_CTLR_EL1, Interrupt Controller Control Register, ELI on page B4-321. 
© B4.8ICC_CTLR_EL3, Interrupt Controller Control Register, EL3 on page B4-323. 
¢ B4.9ICC_SRE_EL1, Interrupt Controller System Register Enable Register, ELI on page B4-325. 
¢ B4.10ICC_SRE_EL2, Interrupt Controller System Register Enable register, EL2 on page B4-326. 
© B4.11 ICC_SRE_EL3, Interrupt Controller System Register Enable register, EL3 on page B4-328. 
¢ B4.12 AArch64 virtual GIC CPU interface register summary on page B4-330. 
¢ B4.13 ICV_APORO_ELI, Interrupt Controller Virtual Active Priorities Group 0 Register 0, EL 
on page B4-331. 
¢ B4.14ICV_APIRO_ELI, Interrupt Controller Virtual Active Priorities Group I Register 0, EL1 
on page B4-332. 
© B4.15 ICV_BPRO_ELI, Interrupt Controller Virtual Binary Point Register 0, EL1 on page B4-333. 
© B4.16ICV_BPRI_ ELI, Interrupt Controller Virtual Binary Point Register I, EL1 on page B4-334. 
© B4.17ICV_CTLR_ELI, Interrupt Controller Virtual Control Register, ELI on page B4-335. 
¢ B4.18 AArch64 virtual interface control system register summary on page B4-337. 
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B4 GIC registers 


B4.19 ICH_APORO_EL2, Interrupt Controller Hyp Active Priorities Group 0 Register 0, EL2 
on page B4-338. 

B4.20 ICH_APIRO_EL2, Interrupt Controller Hyp Active Priorities Group I Register 0, EL2 
on page B4-339., 

B4.21 ICH_HCR_EL2, Interrupt Controller Hyp Control Register, EL2 on page B4-340. 
B4.22 ICH_VMCR_EL2, Interrupt Controller Virtual Machine Control Register, EL2 

on page B4-343. 

B4.23 ICH_VTR_EL2, Interrupt Controller VGIC Type Register, EL2 on page B4-345. 
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B4 GIC registers 
B4.1 CPU interface registers 


B4.1 CPU interface registers 


Each CPU interface block provides the interface for the Cortex-A76 core that interfaces with a GIC 
distributor within the system. 


The Cortex-A76 core only supports system register access to the GIC CPU interface registers. The 
following table lists the three types of GIC CPU interface system registers supported in the Cortex-A76 
core. 


Table B4-1 GIC CPU interface system register types supported in the Cortex-A76 core. 














Register prefix | Register type 

ICC Physical GIC CPU interface system registers. 
ICV Virtual GIC CPU interface system registers. 
ICH Virtual interface control system registers. 














Access to virtual GIC CPU interface system registers is only possible at Non-secure EL1. 


Access to ICC registers or the equivalent ICV registers is determined by HCR_EL2. See 
B2.52 HCR_EL2, Hypervisor Configuration Register, EL2 on page B2-214. 


For more information on the CPU interface, see the Arm® Generic Interrupt Controller Architecture 
Specification. 
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B4 GIC registers 
B4.2 AArch64 physical GIC CPU interface system register summary 


B4.2 AArch64 physical GIC CPU interface system register summary 


The following table lists the AArch64 physical GIC CPU interface system registers that have 
IMPLEMENTATION DEFINED bits. 


See the Arm® Generic Interrupt Controller Architecture Specification for more information and a 
complete list of AArch64 physical GIC CPU interface system registers. 


Table B4-2 AArch64 physical GIC CPU interface system register summary 





Name Op0 | Op1 | CRn | CRm | Op2 | Type | Description 





ICC_APORO EL] |3 0 12 8 4 RW_ | B4.3 ICC_APORO_EL1, Interrupt Controller Active Priorities Group 0 
Register 0, ELI on page B4-317 





ICC_AP1RO EL] |3 0 12 9 0 RW_ | B4.4 ICC_APIRO_ELI, Interrupt Controller Active Priorities Group 1 
Register 0 EL1 on page B4-318 





ICC_BPRO EL1 |3 0 12 8 3 RW | B4.5 ICC_BPRO_ELI, Interrupt Controller Binary Point Register 0, 
ELI on page B4-319 





ICC_BPRI ELI] |3 0 12 12 3 RW_ | 84.6 ICC_BPRI_ELI, Interrupt Controller Binary Point Register 1, 
ELI on page B4-320 





ICC_CTLR_EL1 |3 0 12 12 4 RW_ | B4.7 ICC_CTLR_EL1, Interrupt Controller Control Register, EL1 
on page B4-321 





ICC_CTLR_EL3 |3 6 12 12 4 RW | B4.8 ICC_CTLR_EL3, Interrupt Controller Control Register, EL3 
on page B4-323 





ICC_SRE EL1 3 0 12 12 5 RW | B4.9 ICC_SRE_EL1, Interrupt Controller System Register Enable 
Register, ELI on page B4-325 





ICC_SRE EL2 3 4 12 9 5 RW_ | B4.10 ICC_SRE_EL2, Interrupt Controller System Register Enable 
register, EL2 on page B4-326 





ICC_SRE EL3 3 6 12 12 5 RW_ | B4.11 ICC_SRE_EL3, Interrupt Controller System Register Enable 
register, EL3 on page B4-328 
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B4 GIC registers 
B4.3 ICC_APORO_EL1, Interrupt Controller Active Priorities Group 0 Register 0, EL1 


B4.3 ICC_APORO_EL1, Interrupt Controller Active Priorities Group 0 Register 0, 
EL1 


The ICC_APORO_ ELI provides information about Group 0 active priorities. 


Bit descriptions 

This register is a 32-bit register and is part of: 
¢ The GIC system registers functional group. 
¢ The GIC control registers functional group. 


The core implements 5 bits of priority with 32 priority levels, corresponding to the 32 bits [31:0] of the 
register. The possible values for each bit are: 


@x@eee0eee No interrupt active. This is the reset value. 
@xee00e001 Interrupt active for priority exe. 
@xee00e002 Interrupt active for priority x8. 


@x8eeee00e Interrupt active for priority @xF8. 


Details not provided in this description are architecturally defined. See the Arm® Generic Interrupt 
Controller Architecture Specification. 
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B4 GIC registers 
B4.4 ICC_AP1RO_EL1, Interrupt Controller Active Priorities Group 1 Register 0 EL1 


B4.4 ICC_AP1RO0_EL1, Interrupt Controller Active Priorities Group 1 Register 0 EL1 
The ICC_AP1RO_ ELI provides information about Group | active priorities. 


Bit descriptions 

This register is a 32-bit register and is part of: 
¢ The GIC system registers functional group. 
¢ The GIC control registers functional group. 


The core implements 5 bits of priority with 32 priority levels, corresponding to the 32 bits [31:0] of the 
register. The possible values for each bit are: 


@x@eee0800 No interrupt active. This is the reset value. 
@x@e800001 Interrupt active for priority exe. 
@xee00e002 Interrupt active for priority x8. 


@x8e000e000 Interrupt active for priority @xF8. 


Details not provided in this description are architecturally defined. See the Arm® Generic Interrupt 
Controller Architecture Specification. 
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B4 GIC registers 
B4.5 ICC_BPRO_EL1, Interrupt Controller Binary Point Register 0, EL1 


B4.5 ICC_BPRO_EL1, Interrupt Controller Binary Point Register 0, EL1 


ICC_BPRO_EL]1 defines the point at which the priority value fields split into two parts, the group 
priority field and the subpriority field. The group priority field determines Group 0 interrupt preemption. 


Bit field descriptions 
ICC_BPRO_ELI is a 32-bit register and is part of: 


¢ The GIC system registers functional group. 
¢ The GIC control registers functional group. 


31 3 2 0 


_ErrtrtlcCtrt—“C;tCmL 


eee 


RESO 


Figure B4-1 ICC_BPRO_EL1 bit assignments 
RESO, [31:3] 


RESO Reserved. 
BinaryPoint, [2:0] 


The value of this field controls how the 8-bit interrupt priority field is split into a group priority 
field, that determines interrupt preemption, and a subpriority field. The minimum value that is 
implemented is: 


@x2 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Generic Interrupt Controller Architecture Specification. 
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B4 GIC registers 
B4.6 ICC_BPR1_EL1, Interrupt Controller Binary Point Register 1, EL1 


B4.6 ICC_BPR1_EL1, Interrupt Controller Binary Point Register 1, EL1 


ICC_BPRI1_EL1 defines the point at which the priority value fields split into two parts, the group 
priority field and the subpriority field. The group priority field determines Group | interrupt preemption. 


Bit field descriptions 
ICC_BPRI1_ELI is a 32-bit register and is part of: 


¢ The GIC system registers functional group. 
¢ The GIC control registers functional group. 


31 3 2 0 


_ErrtrtlcCtrt—“C;tCmL 


eee 


RESO 


Figure B4-2 ICC_BPR1_EL1 bit assignments 
RESO, [31:3] 
RESO Reserved. 
BinaryPoint, [2:0] 


The value of this field controls how the 8-bit interrupt priority field is split into a group priority 
field, that determines interrupt preemption, and a subpriority field. 


The minimum value implemented of ICC_BPR1_ ELI Secure register is 0x2. 
The minimum value implemented of ICC_BPR1_EL1 Non-secure register is @x3. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Generic Interrupt Controller Architecture Specification. 
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B4 GIC registers 
B4.7 ICC_CTLR_EL1, Interrupt Controller Control Register, EL1 


B4.7 ICC_CTLR_EL1, Interrupt Controller Control Register, EL1 


ICC_CTLR_ELI controls aspects of the behavior of the GIC CPU interface and provides information 
about the features implemented. 


Bit field descriptions 

ICC_CTLR_ELI is a 32-bit register and is part of: 
¢ The GIC system registers functional group. 

¢ The GIC control registers functional group. 


31 16151413 11 10 87 65 2 1 0 








PMHE 
SEIS 
A3V 





L_CBPR 
EOlmode 





RESO 


Figure B4-3 ICC_CTLR_EL1 bit assignments 
RESO, [31:16] 
RESO Reserved. 
A3V, [15] 
Affinity 3 Valid. The value is: 


1 The CPU interface logic supports non-zero values of Affinity 3 in SGI generation 
System registers. 


SEIS, [14] 
SEI Support. The value is: 
) The CPU interface logic does not support local generation of SEIs. 
IDbits, [13:11] 
Identifier bits. The value is: 
7) The number of physical interrupt identifier bits supported is 16 bits. 
This field is an alias of ICC_CTLR_EL3.IDbits. 
PRibits, [10:8] 
Priority bits. The value is: 
ex4 The core supports 32 levels of physical priority with 5 priority bits. 
RESO, [7] 
RESO Reserved. 
PMHE, [6] 


Priority Mask Hint Enable. This bit is read only and is an alias of ICC_CTLR_EL3.PMHE. The 
possible values are: 
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B4 GIC registers 
B4.7 ICC_CTLR_EL1, Interrupt Controller Control Register, EL1 


7) Disables use of ICC_PMR as a hint for interrupt distribution. 
1 Enables use of ICC_PMR as a hint for interrupt distribution. 
RESO, [5:2] 


RESO Reserved. 


EOImode, [1] 
End of interrupt mode for the current security state. The possible values are: 


7) ICC_EOIRO and ICC_EOIR1 provide both priority drop and interrupt deactivation 
functionality. Accesses to ICC_DIR are UNPREDICTABLE. 
1 ICC_EOIRO and ICC_EOIR1 provide priority drop functionality only. ICC_DIR 


provides interrupt deactivation functionality. 


CBPR, [0] 
Common Binary Point Register. Control whether the same register is used for interrupt 
preemption of both Group 0 and Group | interrupt. The possible values are: 


) ICC_BPRO determines the preemption group for Group 0 interrupts. 
ICC_BPR1 determines the preemption group for Group | interrupts. 


1 ICC_BPRO determines the preemption group for Group 0 and Group | interrupts. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Generic Interrupt Controller Architecture Specification. 
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B4 GIC registers 
B4.8 ICC_CTLR_EL3, Interrupt Controller Control Register, EL3 


B4.8 ICC_CTLR_EL3, Interrupt Controller Control Register, EL3 


ICC_CTLR_EL3 controls aspects of the behavior of the GIC CPU interface and provides information 
about the features implemented. 


Bit field descriptions 

ICC_CTLR_EL3 is a 32-bit register and is part of: 
¢ The GIC system registers functional group. 

¢ The Security registers functional group. 

¢ The GIC control registers functional group. 


31 181716151413 1110 8.765 43 2 1 0 





|_CBPR_EL1S 
CBPR_EL1NS 
EOlmode_EL3 


EOlmode_EL1S 
EOImode_EL1NS 
RM 

PMHE 

SEIS 

A3V 

nDS 


RESO 


























Figure B4-4 ICC_CTLR_EL3 bit assignments 
RESO, [31:18] 
RESO Reserved. 
nDS, [17] 
Disable Security not supported. Read-only and writes are 1GNoreED. The value is: 
1 The CPU interface logic does not support disabling of security, and requires that 


security is not disabled. 


RESO, [16] 


RESO Reserved. 


ABV, [15] 


Affinity 3 Valid. This bit is RAO/WI. 
SEIS, [14] 
SEI Support. The value is: 
) The CPU interface logic does not support generation of SEIs. 


IDbits, [13:11] 
Identifier bits. The value is: 


exe The number of physical interrupt identifier bits supported is 16 bits. 


This field is an alias of ICC_CTLR_EL3.IDbits. 
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B4 GIC registers 
B4.8 ICC_CTLR_EL3, Interrupt Controller Control Register, EL3 


PRibits, [10:8] 
Priority bits. The value is: 


ex4 The core supports 32 levels of physical priority with 5 priority bits. 
Accesses to ICC_APOR{1—3} and ICC_AP1R{1—3} are UNDEFINED. 


RESO, [7] 
Reserved, RESO. 
PMHE, [6] 
Priority Mask Hint Enable. The possible values are: 
0 Disables use of ICC_PMR as a hint for interrupt distribution. 
1 Enables use of ICC_PMR as a hint for interrupt distribution. 
RM, [5] 


Routing Modifier. This bit is RAZ/WI. 

EOImode_ELINS, [4] 

EOI mode for interrupts handled at Non-secure EL1 and EL2. 

Controls whether a write to an End of Interrupt register also deactivates the interrupt. 
EOImode_ELIS, [3] 

EOI mode for interrupts handled at Secure EL1. 

Controls whether a write to an End of Interrupt register also deactivates the interrupt. 
EOImode_EL3, [2] 

EOI mode for interrupts handled at EL3. 

Controls whether a write to an End of Interrupt register also deactivates the interrupt. 
CBPR_ELINS, [1] 

Common Binary Point Register, EL1 Non-secure. 


Control whether the same register is used for interrupt preemption of both Group 0 and Group 1 
Non-secure interrupts at EL] and EL2. 


CBPR_ELIS, [0] 
Common Binary Point Register, EL1 Secure. 


Control whether the same register is used for interrupt preemption of both Group 0 and Group 1 
Secure interrupt at EL1. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Generic Interrupt Controller Architecture Specification. 
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B4 GIC registers 
B4.9 ICC_SRE_EL1, Interrupt Controller System Register Enable Register, EL1 


B4.9 ICC_SRE_EL1, Interrupt Controller System Register Enable Register, EL1 


ICC_SRE_ELI controls whether the System register interface or the memory-mapped interface to the 
GIC CPU interface is used for ELO and EL1. 


Bit field descriptions 
ICC_SRE_ ELI is a 32-bit register and is part of: 


¢ The GIC system registers functional group. 
¢ The GIC control registers functional group. 


31 32 1 0 


L_SRE 
DFB 
DIB 


RESO 


Figure B4-5 ICC_SRE_EL1 bit assignments 
RESO, [31:3] 


RESO Reserved. 


DIB, [2] 
Disable IRQ bypass. The possible values are: 
@xe IRQ bypass enabled. 
@x1 IRQ bypass disabled. 


This bit is an alias of ICC_SRE EL3.DIB 


DEB, [1] 
Disable FIQ bypass. The possible values are: 
@xe FIQ bypass enabled. 
@x1 FIQ bypass disabled. 


This bit is an alias of ICC_SRE EL3.DFB 
SRE, [0] 
System Register Enable. The value is: 
ex1 The System register interface for the current Security state is enabled. 
This bit is RAO/WI. The core only supports a system register interface to the GIC CPU 
interface. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Generic Interrupt Controller Architecture Specification. 
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B4 GIC registers 
B4.10 ICC_SRE_EL2, Interrupt Controller System Register Enable register, EL2 


B4.10 ICC_SRE_EL42, Interrupt Controller System Register Enable register, EL2 


ICC_SRE_EL2 controls whether the system register interface or the memory-mapped interface to the 
GIC CPU interface is used for EL2. 


Bit field descriptions 

ICC_SRE_EL2 is a 32-bit register and is part of: 
¢ The GIC system registers functional group. 

¢ The Virtualization registers functional group. 
¢ The GIC control registers functional group. 


31 4 32 10 


L_SRE 
DFB 
DIB 


Enable 


RESO 


Figure B4-6 ICC_SRE_EL2 bit assignments 
RESO, [31:4] 
RESO Reserved. 
Enable, [3] 
Enables lower Exception level access to ICC_SRE_EL1. The value is: 
@x1 Non-secure EL1 accesses to ICC_SRE_ ELI do not trap to EL2. 


This bit is RAO/WI. 
DIB, [2] 
Disable IRQ bypass. The possible values are: 
@xe IRQ bypass enabled. 
@x1 IRQ bypass disabled. 


This bit is an alias of ICC_SRE EL3.DIB 
DEB, [1] 

Disable FIQ bypass. The possible values are: 

exe FIQ bypass enabled. 

@x1 FIQ bypass disabled. 


This bit is an alias of ICC_SRE EL3.DFB 





SRE, [0] 
System Register Enable. The value is: 
ex1 The System register interface for the current Security state is enabled. 
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B4 GIC registers 
B4.10 ICC_SRE_EL2, Interrupt Controller System Register Enable register, EL2 


This bit is RAO/WI. The core only supports a system register interface to the GIC CPU 
interface. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Generic Interrupt Controller Architecture Specification. 
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B4 GIC registers 
B4.11 ICC_SRE_EL3, Interrupt Controller System Register Enable register, EL3 


B4.11 ICC _SRE_EL43, Interrupt Controller System Register Enable register, EL3 


ICC_SRE_EL3 controls whether the System register interface or the memory-mapped interface to the 
GIC CPU interface is used for EL3. 


Bit field descriptions 

ICC_SRE_EL3 is a 32-bit register and is part of: 
¢ The GIC system registers functional group. 

¢ The Security registers functional group. 

¢ The GIC control registers functional group. 


31 4 32 10 


L_SRE 
DFB 
DIB 


Enable 


RESO 


Figure B4-7 ICC_SRE_EL3 bit assignments 
RESO, [31:4] 
RESO Reserved. 
Enable, [3] 
Enables lower Exception level access to ICC_SRE_EL1 and ICC_SRE_EL2. The value is: 


1 « Secure EL] accesses to Secure ICC_SRE_EL1 do not trap to EL3. 
* EL2 accesses to Non-secure ICC_SRE_EL1 and ICC_SRE_EL2 do not trap to 
EL3. 
¢ Non-secure EL1 accesses to ICC_SRE_EL1 do not trap to EL3. 





This bit is RAO/WI. 
DIB, [2] 
Disable IRQ bypass. The possible values are: 
0 IRQ bypass enabled. 
1 IRQ bypass disabled. 
DEB, [1] 
Disable FIQ bypass. The possible values are: 
0 FIQ bypass enabled. 
1 FIQ bypass disabled. 
SRE, [0] 
System Register Enable. The value is: 
1 The System register interface for the current Security state is enabled. 
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B4 GIC registers 
B4.11 ICC_SRE_EL3, Interrupt Controller System Register Enable register, EL3 


This bit is RAO/WI. The core only supports a system register interface to the GIC CPU 
interface. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Generic Interrupt Controller Architecture Specification. 
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B4 GIC registers 
B4.12 AArch64 virtual GIC CPU interface register summary 


B4.12 AArch64 virtual GIC CPU interface register summary 


The following table describes the AArch64 virtual GIC CPU interface system registers that have 
IMPLEMENTATION DEFINED bits. 


See the Arm® Generic Interrupt Controller Architecture Specification for more information and a 
complete list of AArch64 virtual GIC CPU interface system registers. 


Table B4-3 AArch64 virtual GIC CPU interface register summary 


















































Name Op0 | Op1 | CRn | CRm | Op2 | Type | Description 

ICV_APORO EL] | 3 0 12 8 4 RW_ | B4.13 ICV_APORO_EL1, Interrupt Controller Virtual Active Priorities 
Group 0 Register 0, EL1 on page B4-331 

ICV_AP1RO_EL1 | 3 0 12 9 0 RW_ | B4.14 ICV_APIRO_EL1, Interrupt Controller Virtual Active Priorities 
Group I Register 0, ELI on page B4-332 

ICV_BRPO EL] |3 0 12 8 3 RW_ | B4.15 ICV_BPRO_EL1, Interrupt Controller Virtual Binary Point 
Register 0, ELI on page B4-333 

ICV_BPR1 EL] |3 0 12 12 3 RW_ | 84.16 ICV_BPR1_EL1, Interrupt Controller Virtual Binary Point 
Register 1, EL1 on page B4-334 

ICV_CTLR_EL1 |3 0 12 12 4 RW_ | B4.17 ICV_CTLR_ELI, Interrupt Controller Virtual Control Register, 
ELI on page B4-335 
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B4 GIC registers 
B4.13 ICV_APORO_EL1, Interrupt Controller Virtual Active Priorities Group 0 Register 0, EL1 


B4.13. ICV_APORO_EL41, Interrupt Controller Virtual Active Priorities Group 0 
Register 0, EL1 


The ICV_APORO_ ELI register provides information about virtual Group 0 active priorities. 


Bit descriptions 
This register is a 32-bit register and is part of the virtual GIC system registers functional group. 


The core implements 5 bits of priority with 32 priority levels, corresponding to the 32 bits [31:0] of the 
register. The possible values for each bit are: 


@x@ee00000 No interrupt active. This is the reset value. 
@xee00e001 Interrupt active for priority exe. 
@xeeeee002 Interrupt active for priority x8. 


@x8eeee00e Interrupt active for priority @xF8. 


Details that are not provided in this description are architecturally defined. See the Arm® Generic 
Interrupt Controller Architecture Specification. 
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B4 GIC registers 
B4.14 ICV_AP1RO_EL1, Interrupt Controller Virtual Active Priorities Group 1 Register 0, EL1 


B4.14 ICV_AP1R0_EL41, Interrupt Controller Virtual Active Priorities Group 1 
Register 0, EL1 


The ICV_APIRO_ ELI register provides information about virtual Group | active priorities. 


Bit descriptions 
This register is a 32-bit register and is part of the virtual GIC system registers functional group. 


The core implements 5 bits of priority with 32 priority levels, corresponding to the 32 bits [31:0] of the 
register. The possible values for each bit are: 


@x@ee00000 No interrupt active. This is the reset value. 
@xee00e001 Interrupt active for priority exe. 
@xeeeee002 Interrupt active for priority x8. 


@x8eeee00e Interrupt active for priority @xF8. 


Details that are not provided in this description are architecturally defined. See the Arm® Generic 
Interrupt Controller Architecture Specification. 
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B4 GIC registers 
B4.15 ICV_BPRO_EL1, Interrupt Controller Virtual Binary Point Register 0, EL1 


B4.15 ICV_BPRO_EL41, Interrupt Controller Virtual Binary Point Register 0, EL1 


ICV_BPRO_EL1 defines the point at which the priority value fields split into two parts, the group 
priority field and the subpriority field. The group priority field determines virtual Group 0 interrupt 
preemption. 


Bit field descriptions 


ICC_BPRO_EL] is a 32-bit register and is part of the virtual GIC system registers functional group. 


31 3 2 0 
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RESO 


Figure B4-8 ICV_BPRO_EL1 bit assignments 
RESO, [31:3] 
Reserved, RESO. 
BinaryPoint, [2:0] 


The value of this field controls how the 8-bit interrupt priority field is split into a group priority 
field, that determines interrupt preemption, and a subpriority field. The minimum value that is 
implemented is: 


@x2 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Generic Interrupt Controller Architecture Specification. 
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B4 GIC registers 
B4.16 ICV_BPR1_EL1, Interrupt Controller Virtual Binary Point Register 1, EL1 


B4.16 ICV_BPR1_EL41, Interrupt Controller Virtual Binary Point Register 1, EL1 


ICV_BPR1_ ELI defines the point at which the priority value fields split into two parts, the group 
priority field and the subpriority field. The group priority field determines virtual Group | interrupt 
preemption. 


Bit field descriptions 


ICV_BPR1_ ELI is a 32-bit register and is part of the virtual GIC system registers functional group. 


31 3 2 0 
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Figure B4-9 ICV_BPR1_EL1 bit assignments 
RESO, [31:3] 
RESO Reserved. 
BinaryPoint, [2:0] 


The value of this field controls how the 8-bit interrupt priority field is split into a group priority 
field, that determines interrupt preemption, and a subpriority field. 


The minimum value that is implemented of ICV_BPR1 ELI Secure register is @x2. 
The minimum value that is implemented of ICV_BPR1 ELI Non-secure register is 0x3. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Generic Interrupt Controller Architecture Specification. 
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B4 GIC registers 
B4.17 ICV_CTLR_EL1, Interrupt Controller Virtual Control Register, EL1 


B4.17  ICV_CTLR_EL41, Interrupt Controller Virtual Control Register, EL1 


ICV_CTLR_ELI controls aspects of the behavior of the GIC virtual CPU interface and provides 
information about the features implemented. 


Bit field descriptions 


ICV_CTLR_EL] is a 32-bit register and is part of the virtual GIC system registers functional group. 


31 16151413 11 10 8 7 210 
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Figure B4-10 ICV_CTLR_EL1 bit assignments 

RESO, [31:16] 

RESO Reserved. 
A3V, [15] 

Affinity 3 Valid. The value is: 

@x1 The virtual CPU interface logic supports non-zero values of Affinity 3 in SGI 

generation System registers. 

SEIS, [14] 

SEI Support. The value is: 


@xe The virtual CPU interface logic does not support local generation of SEIs. 


IDbits, [13:11] 
Identifier bits. The value is: 


exe The number of physical interrupt identifier bits supported is 16 bits. 


PRIbits, [10:8] 

Priority bits. The value is: 

ex4 Support 32 levels of physical priority (5 priority bits). 
RESO, [7:2] 

RESO Reserved. 
VEOImode, [1] 


Virtual EOI mode. The possible values are: 


exe ICV_EOIRO_EL1 and ICV_EOIR1_ ELI provide both priority drop and interrupt 
deactivation functionality. Accesses to ICV_DIR_EL1 are UNPREDICTABLE. 
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B4 GIC registers 
B4.17 ICV_CTLR_EL1, Interrupt Controller Virtual Control Register, EL1 


@x1 ICV_EOIRO_EL1 and ICV_EOIR1_ ELI provide priority drop functionality only. 
ICV_DIR provides interrupt deactivation functionality. 
VCBPR, [0] 


Common Binary Point Register. Controls whether the same register is used for interrupt 
preemption of both virtual Group 0 and virtual Group | interrupts. The possible values are: 


0 ICV_BPRO_EL1 determines the preemption group for virtual Group 0 interrupts 
only. 


ICV_BPR1_ELI1 determines the preemption group for virtual Group | interrupts. 


1 ICV_BPRO_ ELI determines the preemption group for both virtual Group 0 and 
virtual Group | interrupts. 


Reads of ICV_BPR1_EL1 return ICV_BPRO_ ELI plus one, saturated to 111. Writes 
to ICV_BPR1_ EL] are IGNoreED. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Generic Interrupt Controller Architecture Specification. 
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B4 GIC registers 
B4.18 AArch64 virtual interface control system register summary 


B4.18 AArché64 virtual interface control system register summary 


The following table lists the AArch64 virtual interface control system registers that have IMPLEMENTATION 


DEFINED bits. 


See the Arm® Generic Interrupt Controller Architecture Specification for more information and a 
complete list of AArch64 virtual interface control system registers. 


Table B4-4 AArch64 virtual interface control system register summary 


















































Name Op0 | Op1 | CRn | CRm | Op2 | Type | Description 

ICH_APORO EL] | 3 0 12 8 4 RW | B4.19 ICH _APORO_EL2, Interrupt Controller Hyp Active Priorities 
Group 0 Register 0, EL2 on page B4-338 

ICH_AP1RO_EL1 | 3 0 19 9 0 RW_ | 84.20 ICH_AP1RO_EL2, Interrupt Controller Hyp Active Priorities 
Group I Register 0, EL2 on page B4-339 

ICH_HCR_EL2 |3 4 12 11 0 RW_ | B4.21 ICH_HCR_EL2, Interrupt Controller Hyp Control Register, EL2 
on page B4-340 

ICH_VTR_EL2 |3 4 12 11 1 RO | B4.22 ICH_VMCR_EL2, Interrupt Controller Virtual Machine Control 
Register, EL2 on page B4-343 

ICH_VMCR_EL2 | 3 4 12 11 i RW_ | B4.23 ICH_VTR_EL2, Interrupt Controller VGIC Type Register, EL2 
on page B4-345 
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B4 GIC registers 
B4.19 ICH_APORO_EL2, Interrupt Controller Hyp Active Priorities Group 0 Register 0, EL2 


B4.19 ICH_APORO_EL2, Interrupt Controller Hyp Active Priorities Group 0 Register 
0, EL2 


The ICH_APORO_EL2 provides information about Group 0 active priorities for EL2. 


Bit field descriptions 

This register is a 32-bit register and is part of: 

¢ The GIC system registers functional group. 

¢ The Virtualization registers functional group. 

¢ The GIC host interface control registers functional group. 


The core implements 5 bits of priority with 32 priority levels, corresponding to the 32 bits [31:0] of the 
register. The possible values for each bit are: 


@x@eee00ee No interrupt active. This is the reset value. 
@xee00e001 Interrupt active for priority exe. 
@xeeeee002 Interrupt active for priority @x8. 


@x8eeee000 Interrupt active for priority @xF8. 


Details that are not provided in this description are architecturally defined. See the Arm® Generic 
Interrupt Controller Architecture Specification. 
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B4 GIC registers 
B4.20 ICH_AP1RO_EL2, Interrupt Controller Hyp Active Priorities Group 1 Register 0, EL2 


B4.20 ICH_AP1R0_EL2, Interrupt Controller Hyp Active Priorities Group 1 Register 
0, EL2 


The ICH_AP1RO_EL2 provides information about Group | active priorities for EL2. 


Bit field descriptions 

This register is a 32-bit register and is part of: 

¢ The GIC system registers functional group. 

¢ The Virtualization registers functional group. 

¢ The GIC host interface control registers functional group. 


The core implements 5 bits of priority with 32 priority levels, corresponding to the 32 bits [31:0] of the 
register. The possible values for each bit are: 


@x@eee00ee No interrupt active. This is the reset value. 
@xee00e001 Interrupt active for priority exe. 
@xeeeee002 Interrupt active for priority @x8. 


@x8eeee000 Interrupt active for priority @xF8. 


Details that are not provided in this description are architecturally defined. See the Arm® Generic 
Interrupt Controller Architecture Specification. 
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B4 GIC registers 
B4.21 ICH_HCR_EL2, Interrupt Controller Hyp Control Register, EL2 


B4.21 ICH _HCR_EL4Z, Interrupt Controller Hyp Control Register, EL2 
ICH_HCR_EL2 controls the environment for VMs. 


Bit field descriptions 

ICH_HCR_EL2 is a 32-bit register and is part of: 

¢ The GIC system registers functional group. 

¢ The Virtualization registers functional group. 

¢ The GIC host interface control registers functional group. 


31 27 26 15 14 13 12 11 10 876543 2 1 0 

















TDIR—! L_En 
TSE! UIE 
TALL1 LRENPIE 
TALLO NPIE 
TC VGrpOEIE 
arco VGrpODIE 
VGrp1ElE 
VGrp1DIE 


Figure B4-11 ICH_HCR_EL2 bit assignments 
EOIcount, [31:27] 


Number of outstanding deactivates. 
RESO, [26:15] 
RESO Reserved. 
TDIR, [14] 
Trap Non-secure EL1 writes to ICC_DIR_EL1 and ICV_DIR_ELI. The possible values are: 


exe Non-secure EL1 writes of ICC_DIR_EL1 and ICV_DIR_ELI are not trapped to 
EL2, unless trapped by other mechanisms. 
ex1 Non-secure EL1 writes of ICC_DIR_EL1 and ICV_DIR_EL] are trapped to EL2. 
TSE], [13] 


Trap all locally generated SEIs. The value is: 
0 Locally generated SEIs do not cause a trap to EL2. 


TALL, [12] 


Trap all Non-secure EL1 accesses to ICC_* and ICV_* System registers for Group | interrupts 
to EL2. The possible values are: 


@xe Non-secure EL1 accesses to ICC_* and ICV_* registers for Group | interrupts 
proceed as normal. 

ex1 Non-secure EL1 accesses to ICC_* and ICV_* registers for Group | interrupts trap 
to EL2. 


TALLO, [11] 


Trap all Non-secure EL1 accesses to ICC_* and ICV_* System registers for Group 0 interrupts 
to EL2. The possible values are: 
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B4 GIC registers 
B4.21 ICH_HCR_EL2, Interrupt Controller Hyp Control Register, EL2 


exe Non-secure EL1 accesses to ICC_* and ICV_* registers for Group 0 interrupts 
proceed as normal. 


@x1 Non-secure EL1 accesses to ICC_* and ICV_* registers for Group 0 interrupts trap 
to EL2. 
TC, [10] 


Trap all Non-secure EL1 accesses to System registers that are common to Group 0 and Group 1| 
to EL2. The possible values are: 


exe Non-secure EL1 accesses to common registers proceed as normal. 
@x1 Non-secure EL1 accesses to common registers trap to EL2. 
RESO, [9:8] 


RESO Reserved. 


VGrp1DIE, [7] 
VM Group | Disabled Interrupt Enable. The possible values are: 
0 Maintenance interrupt disabled. 


1 Maintenance interrupt signaled when ICH _VMCR_EL2.VENGI is 0. 


VGrp1EIE, [6] 
VM Group | Enabled Interrupt Enable. The possible values are: 
0 Maintenance interrupt disabled. 


1 Maintenance interrupt signaled when ICH _VMCR_EL2.VENGI is 1. 


VGrpODIE, [5] 
VM Group 0 Disabled Interrupt Enable. The possible values are: 
0 Maintenance interrupt disabled. 


1 Maintenance interrupt signaled when ICH _VMCR_EL2.VENG0 is 0. 


VGrp0EIE, [4] 
VM Group 0 Enabled Interrupt Enable. The possible values are: 


0 Maintenance interrupt disabled. 
1 Maintenance interrupt signaled when ICH _VMCR_EL2.VENG0 is 1. 
NPIE, [3] 
No Pending Interrupt Enable. The possible values are: 
0 Maintenance interrupt disabled. 
1 Maintenance interrupt signaled while the List registers contain no interrupts in the 


pending state. 


LRENPIE, [2] 


List Register Entry Not Present Interrupt Enable. The possible values are: 





0 Maintenance interrupt disabled. 
1 Maintenance interrupt is asserted while the EOIcount field is not 0. 
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B4 GIC registers 
B4.21 ICH_HCR_EL2, Interrupt Controller Hyp Control Register, EL2 


UIE, [1] 
Underflow Interrupt Enable. The possible values are: 
0 Maintenance interrupt disabled. 
1 Maintenance interrupt is asserted if none, or only one, of the List register entries is 


marked as a valid interrupt. 


En, [0] 
Enable. The possible values are: 
0 Virtual CPU interface operation disabled. 
1 Virtual CPU interface operation enabled. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Generic Interrupt Controller Architecture Specification. 
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B4 GIC registers 
B4.22 ICH_VMCR_EL2, Interrupt Controller Virtual Machine Control Register, EL2 


B4.22 ICH_VMCR_ELZ, Interrupt Controller Virtual Machine Control Register, EL2 


ICH_VMCR_EL2 enables the hypervisor to save and restore the virtual machine view of the GIC state. 


Bit field descriptions 

ICH_VMCR_EL2 is a 32-bit register and is part of: 

¢ The GIC system registers functional group. 

¢ The Virtualization registers functional group. 

¢ The GIC host interface control registers functional group. 





31 2423 2120 1817 109 8 543210 
L_VENGO 
VENG1 
VFIQEn 
VCBPR 
a VEOIM 


Figure B4-12 ICH_VMCR_EL2 bit assignments 
VPMR, [31:24] 
Virtual Priority Mask. 
This field is an alias of ICV_PMR_EL1.Priority. 


VBPRO, [23:21] 
Virtual Binary Point Register, Group 0. The minimum value is: 
@x2 This field is an alias of ICV_BPRO_ EL1.BinaryPoint. 


VBPRI1, [20:18] 
Virtual Binary Point Register, Group 1. The minimum value is: 


@x3 This field is an alias of ICV_BPR1_ EL1.BinaryPoint. 


RESO, [17:10] 


RESO Reserved. 


VEOIM, [9] 
Virtual EOI mode. The possible values are: 
exe ICV_EOIRO_EL1 and ICV_EOIR1_ ELI provide both priority drop and interrupt 
deactivation functionality. Accesses to ICV_DIR_EL1 are UNPREDICTABLE. 
ex1 ICV_EOIRO_EL1 and ICV_EOIRI1_ ELI provide priority drop functionality only. 


ICV_DIR_EL1 provides interrupt deactivation functionality. 


This bit is an alias of ICV_CTLR_EL1.EOImode. 
RESO, [8:5] 


RESO Reserved. 


VCBPR, [4] 
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B4 GIC registers 
B4.22 ICH_VMCR_EL2, Interrupt Controller Virtual Machine Control Register, EL2 


Virtual Common Binary Point Register. The possible values are: 


exe ICV_BPRO_EL1 determines the preemption group for virtual Group 0 interrupts 
only. 


ICV_BPR1_ ELI determines the preemption group for virtual Group | interrupts. 


ex1 ICV_BPRO_EL1 determines the preemption group for both virtual Group 0 and 
virtual Group | interrupts. 


Reads of ICV_BPR1_EL1 return ICV_BPRO_ ELI plus one, saturated to 111. Writes 
to ICV_BPR1_ EL] are IGNoreED. 
VFIQEn, [3] 
Virtual FIQ enable. The value is: 


@x1 Group 0 virtual interrupts are presented as virtual FIQs. 


RESO, [2] 


RESO Reserved. 


VENGI, [1] 
Virtual Group | interrupt enable. The possible values are: 
exe Virtual Group | interrupts are disabled. 
ex1 Virtual Group | interrupts are enabled. 
VENGO, [0] 
Virtual Group 0 interrupt enable. The possible values are: 
exe Virtual Group 0 interrupts are disabled. 
ex1 Virtual Group 0 interrupts are enabled. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Generic Interrupt Controller Architecture Specification. 
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B4 GIC registers 
B4.23 ICH_VTR_EL2, Interrupt Controller VGIC Type Register, EL2 


ICH_VTR_EL42, Interrupt Controller VGIC Type Register, EL2 


ICH_VTR_EL2 reports supported GIC virtualization features. 


Bit field descriptions 

ICH_VTR_EL2 is a 32-bit register and is part of: 

¢ The GIC system registers functional group. 

¢ The Virtualization registers functional group. 

¢ The GIC host interface control registers functional group. 


31. 2928 2625 232221201918 5 4 0 





L_Tps 
nVv4 
A3V 


SEIS 


RESO 


Figure B4-13 ICH_VTR_EL2 bit assignments 
PRIbits, [31:29] 
Priority bits. The number of virtual priority bits implemented, minus one. 


ex4 Priority implemented is 5-bit. 


PREbits, [28:26] 
The number of virtual preemption bits implemented, minus one. The value is: 


@x4 Virtual preemption implemented is 5-bit. 


IDbits, [25:23] 


The number of virtual interrupt identifier bits supported. The value is: 


exe Virtual interrupt identifier bits that are implemented is 16-bit. 
SEIS, [22] 

SEI Support. The value is: 

@xe The virtual CPU interface logic does not support generation of SEIs. 
A3V, [21] 


Affinity 3 Valid. The value is: 


ex1 The virtual CPU interface logic supports non-zero values of Affinity 3 in SGI 
generation System registers. 





nV4, [20] 
Direct injection of virtual interrupts not supported. The value is: 
exe The CPU interface logic supports direct injection of virtual interrupts. 
TDS, [19] 
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B4 GIC registers 
B4.23 ICH_VTR_EL2, Interrupt Controller VGIC Type Register, EL2 


Separate trapping of Non-secure EL1 writes to ICV_DIR_EL1 supported. The value is: 
ex1 Implementation supports ICH HCR_EL2.TDIR. 


RESO, [18:5] 
RESO Reserved. 
ListRegs, [4:0] 
@x3 The number of implemented List registers, minus one. 
The core implements 4 list registers. Accesses to ICH_LR_EL2[x] (x>3) in 


AArch64 are UNDEFINED. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Generic Interrupt Controller Architecture Specification. 
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Chapter B5 
Advanced SIMD and floating-point registers 


This chapter describes the Advanced SIMD and floating-point registers. 


It contains the following sections: 

¢ B5.1 AArch64 register summary on page B5-348. 

¢ B5.2 FPCR, Floating-point Control Register on page B5-349. 

¢ B5.3 FPSR, Floating-point Status Register on page B5-351. 

¢ BS5.4 MVFRO_EL1, Media and VFP Feature Register 0, ELI on page BS-353. 
¢ BS5.5 MVFRI_ELI, Media and VFP Feature Register 1, ELI on page BS-355. 
¢ B5.6 MVFR2_EL1, Media and VFP Feature Register 2, ELI on page BS-357. 
¢ B5.7 AArch32 register summary on page B5-359. 

¢ B5.8 FPSCR, Floating-Point Status and Control Register on page B5-360. 
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B5.1 AArch64 register summary 


B5 Advanced SIMD and floating-point registers 
B5.1 AArch64 register summary 


The core has several Advanced SIMD and floating-point system registers in the AArch64 execution 
state. Each register has a specific purpose, specific usage constraints, configurations, and attributes. 


The following table gives a summary of the Cortex-A76 core Advanced SIMD and floating-point system 
registers in the AArch64 execution state. 


Table B5-1 AArch64 Advanced SIMD and floating-point system registers 









































Name Type Reset Description 
FPCR RW 0x80000000 See B5.2 FPCR, Floating-point Control Register on page B5-349. 
FPSR RW UNKNOWN See B5.3 FPSR, Floating-point Status Register on page BS5-351. 
MVFRO EL1 RO @x10110222 See B5.4 MVFRO_EL1, Media and VFP Feature Register 0, EL1 
on page B5-353. 
MVFRI EL1 RO @x13211111 See B5.5 MVFR1_EL1, Media and VFP Feature Register 1, EL1 
on page B5-355. 
MVFR2_ EL1 RO 0xe00000043 See B5.6 MVFR2_EL1, Media and VFP Feature Register 2, EL1 
on page B5-357. 
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B5 Advanced SIMD and floating-point registers 
B5.2 FPCR, Floating-point Control Register 


B5.2 FPCR, Floating-point Control Register 


The FPCR controls floating-point behavior. 


Bit field descriptions 
FPCR is a 32-bit register. 


31 27 26 25 24 23 22 21 20 19 18 0 
AHP— L_FZ16 
DN 
FZ 
RMode 
RESO 


Figure B5-1 FPCR bit assignments 
RESO, [31:27] 


RESO Reserved. 


AHP, [26] 
Alternative half-precision control bit. The possible values are: 
) IEEE half-precision format selected. This is the reset value. 
1 Alternative half-precision format selected. 
DN, [25] 
Default NaN mode control bit. The possible values are: 
7) NaN operands propagate through to the output of a floating-point operation. This is the 
reset value. 
1 Any operation involving one or more NaNs returns the Default NaN. 
FZ, [24] 
Flush-to-zero mode control bit. The possible values are: 
) Flush-to-zero mode disabled. Behavior of the floating-point system is fully compliant 
with the IEEE 754 standard. This is the reset value. 
1 Flush-to-zero mode enabled. 


RMode, [23:22] 
Rounding Mode control field. The encoding of this field is: 


@bee@ Round to Nearest (RN) mode. This is the reset value. 
@b@1 Round towards Plus Infinity (RP) mode. 

@b1@ Round towards Minus Infinity (RM) mode. 

@b11 Round towards Zero (RZ) mode. 


RESO, [21:20] 


RESO Reserved. 
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B5 Advanced SIMD and floating-point registers 
B5.2 FPCR, Floating-point Control Register 


FZ16, [19] 
Flush-to-zero mode control bit on half-precision data-processing instructions. The possible 
values are: 
() Flush-to-zero mode disabled. Behavior of the floating-point system is fully compliant 
with the IEEE 754 standard. This is the default value. 
1 Flush-to-zero mode enabled. 
RESO, [18:0] 


RESO Reserved. 


Configurations 


The named fields in this register map to the equivalent fields in the AArch32 FPSCR. See 
B5.8 FPSCR, Floating-Point Status and Control Register on page B5-360. 


Usage constraints 
Accessing the FPCR 
To access the FPCR: 


MRS <Xt>, FPCR ; Read FPCR into Xt 
MSR FPCR, <Xt> ; Write Xt to FPCR 


Register access is encoded as follows: 


Table B5-2 FPCR access encoding 





op0 | op1 | CRn | CRm | op2 











11 | 011 |0100}0100 | 000 















































Accessibility 
This register is accessible as follows: 
ELO|EL1 |EL1|El2/ E13 EL3 
(NS) | (S) (SCR.NS = 1) | (SCR.NS = 0) 
RW |RW |RW | RW | RW RW 
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B5 Advanced SIMD and floating-point registers 
B5.3 FPSR, Floating-point Status Register 











B5.3 FPSR, Floating-point Status Register 
The FPSR provides floating-point system status information. 
Bit field descriptions 
FPSR is a 32-bit register. 
31 30 29 28 27 26 876543210 
Lac Inc —! 
Vv 
Cc IXC 
Zz UFC 
N OFC 
DZC 
lOc 
RESO 
Figure B5-2 FPSR bit assignments 
N, [31] 
Negative condition flag for AArch32 floating-point comparison operations. AArch64 floating- 
point comparisons set the PSTATE.N flag instead. 
Z, [30] 
Zero condition flag for AArch32 floating-point comparison operations. AArch64 floating-point 
comparisons set the PSTATE.Z flag instead. 
C, [29] 
Carry condition flag for AArch32 floating-point comparison operations. AArch64 floating-point 
comparisons set the PSTATE.C flag instead 
V, [28] 
Overflow condition flag for AArch32 floating-point comparison operations. AArch64 floating- 
point comparisons set the PSTATE.V flag instead. 
QC, [27] 
Cumulative saturation bit. This bit is set to 1 to indicate that an Advanced SIMD integer 
operation has saturated since a 0 was last written to this bit. 
RESO, [26:8] 
Reserved, RESO. 
IDC, [7] 
Input Denormal cumulative exception bit. This bit is set to 1 to indicate that the Input Denormal 
exception has occurred since 0 was last written to this bit. 
RESO, [6:5] 
Reserved, RESO. 
IXC, [4] 
Inexact cumulative exception bit. This bit is set to 1 to indicate that the Inexact exception has 
occurred since 0 was last written to this bit. 
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B5 Advanced SIMD and floating-point registers 
B5.3 FPSR, Floating-point Status Register 


UFC, [3] 


Underflow cumulative exception bit. This bit is set to 1 to indicate that the Underflow exception 
has occurred since 0 was last written to this bit. 


OFC, [2] 


Overflow cumulative exception bit. This bit is set to 1 to indicate that the Overflow exception 
has occurred since 0 was last written to this bit. 


DZC, [1] 


Division by Zero cumulative exception bit. This bit is set to | to indicate that the Division by 
Zero exception has occurred since 0 was last written to this bit. 


10C, [0] 


Invalid Operation cumulative exception bit. This bit is set to 1 to indicate that the Invalid 
Operation exception has occurred since 0 was last written to this bit. 


Configurations 
The named fields in this register map to the equivalent fields in the AArch32 FPSCR. See 
B5.8 FPSCR, Floating-Point Status and Control Register on page B5-360. 


Usage constraints 
Accessing the FPSR 
To access the FPSR: 


MRS <Xt>, FPSR; Read FPSR into Xt 
MSR FPSR, <Xt>; Write Xt to FPSR 


Register access is encoded as follows: 


Table B5-3 FPSR access encoding 





op0 | op1 | CRn | CRm | op2 





11 | 011 |0100)0100 | 001 





















































Accessibility 
This register is accessible as follows: 
ELO|EL1 | EL1|ElL2/ E13 EL3 
(NS) | (S) (SCR.NS = 1) | (SCR.NS = 0) 
RW |RW |RW | RW | RW RW 
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B5 Advanced SIMD and floating-point registers 
B5.4 MVFRO_EL1, Media and VFP Feature Register 0, EL1 


B5.4 MVFRO_EL1, Media and VFP Feature Register 0, EL1 


The MVFRO ELI describes the features provided by the AArch64 Advanced SIMD and floating-point 
implementation. 


Bit field descriptions 
MVFRO_ ELI is a 32-bit register. 


28 27 24 23 20 19 1615 12 11 


FPRound | FPShVec FPSart FPDivide FPTrap FPDP FPSP SIMDReg 


Figure B5-3 MVFRO_EL1 bit assignments 
FPRound, [31:28] 
Indicates the rounding modes supported by the floating-point hardware: 


@x1 All rounding modes supported. 


FPShVee, [27:24] 
Indicates the hardware support for floating-point short vectors: 
exe Not supported. 
FPSqrt, [23:20] 
Indicates the hardware support for floating-point square root operations: 
@x1 Supported. 
FPDivide, [19:16] 
Indicates the hardware support for floating-point divide operations: 
@x1 Supported. 
FPTrap, [15:12] 
Indicates whether the floating-point hardware implementation supports exception trapping: 


exe Not supported. 


FPDP, [11:8] 
Indicates the hardware support for floating-point double-precision operations: 


@x2 Supported, VFPv3 or greater. 


See the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile for more 
information. 


FPSP, [7:4] 
Indicates the hardware support for floating-point single-precision operations: 


@x2 Supported, VFPv3 or greater. 


See the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile for more 
information. 


SIMDReg, [3:0] 
Indicates support for the Advanced SIMD register bank: 
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@x2 Supported, 32 x 64-bit registers supported. 


B5 Advanced SIMD and floating-point registers 
B5.4 MVFRO_EL1, Media and VFP Feature Register 0, EL1 


See the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile for more 


information. 


Configurations 
There are no configuration note 


Usage constraints 
Accessing the MVFRO_EL1 
To access the MVFRO_ELI1: 


S. 


MRS <Xt>, MVFR@_EL1 ; Read MVFR@_EL1 into Xt 


Register access is encoded as follows: 


Accessibility 


This register is accessible as follows: 


Table B5-4 MVFRO_EL1 access encoding 





op0 | op1 


CRn 


CRm 


op2 





11 | 000 





0000 








0011 





000 











ELO 


EL1(NS) 


EL4(S) 


EL2 


EL3 (SCR.NS = 1) 


EL3(SCR.NS = 0) 








RO 








RO 





RO 





RO 





RO 
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B5 Advanced SIMD and floating-point registers 
B5.5 MVFR1_EL1, Media and VFP Feature Register 1, EL1 


B5.5 MVFR1_EL1, Media and VFP Feature Register 1, EL1 


The MVFRI ELI describes the features provided by the AArch64 Advanced SIMD and floating-point 
implementation. 


Bit field descriptions 
MVFRI1 ELI is a 32-bit register. 


28 27 24 23 20 19 1615 12 11 


SIMDFMAC} FPHP SIMDHP | SIMDSP SIMDInt SIMDLS | FPDNaN FPFtZ 


Figure B5-4 MVFR1_EL1 bit assignments 


SIMDFMAC, [31:28] 


Indicates whether the Advanced SIMD and floating-point unit supports fused multiply 
accumulate operations: 


1 Implemented. 


FPHP, [27:24] 


Indicates whether the Advanced SIMD and floating-point unit supports half-precision floating- 
point conversion instructions: 


3 Floating-point half precision conversion and data processing instructions 
implemented. 


SIMDHBP, [23:20] 


Indicates whether the Advanced SIMD and floating-point unit supports half-precision floating- 
point conversion operations: 


2 Advanced SIMD half precision conversion and data processing instructions 
implemented. 


SIMDSP, [19:16] 


Indicates whether the Advanced SIMD and floating-point unit supports single-precision 
floating-point operations: 


1 Implemented. 
SIMDInt, [15:12] 
Indicates whether the Advanced SIMD and floating-point unit supports integer operations: 
1 Implemented. 
SIMDLS, [11:8] 
Indicates whether the Advanced SIMD and floating-point unit supports load/store instructions: 
1 Implemented. 


FPDNaN, [7:4] 


Indicates whether the floating-point hardware implementation supports only the Default NaN 
mode: 


1 Hardware supports propagation of NaN values. 


FPFtZ, [3:0] 
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Indicates whether the floating-point hardware implementation supports only the Flush-to-zero 


mode of operation: 


1 Hardware supports full denormalized number arithmetic. 


Configurations 
There are no configuration notes. 


Usage constraints 
Accessing the MVFRI_EL1 
To access the MVFRI1_ELI1: 


MRS <Xt>, MVFR1_EL1 ; Read MVFR1_EL1 into Xt 


Register access is encoded as follows: 


Accessibility 
This register is accessible as follows: 


Table B5-5 MVFR1_EL1 access encoding 





op0 | op1 


CRn 


CRm 


op2 





11 | 000 





0000 








0011 





001 









































ELO | EL1(NS) | EL1(S) | EL2 | EL3 (SCR.NS = 1) | EL3(SCR.NS = 0) 
- RO RO RO |RO RO 
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B5.6 MVFR2_EL1, Media and VFP Feature Register 2, EL1 


The MVFR2_ EL! describes the features provided by the AArch64 Advanced SIMD and floating-point 
implementation. 


Bit field descriptions 
MVFR2 ELI is a 32-bit register. 


31 8 7 4 3 0 
RESO 


Figure B5-5 MVFR2_EL1 bit assignments 
[31:8] 
RESO Reserved. 
FPMisc, [7:4] 
Indicates support for miscellaneous floating-point features. 


@x4 Supports: 
¢ Floating-point selection. 
¢ Floating-point Conversion to Integer with Directed Rounding modes. 
¢ Floating-point Round to Integral Floating-point. 
¢ Floating-point MaxNum and MinNum. 
SIMDMisc, [3:0] 


Indicates support for miscellaneous Advanced SIMD features. 


@x3 Supports: 
¢ Floating-point Conversion to Integer with Directed Rounding modes. 
¢ Floating-point Round to Integral Floating-point. 
¢ Floating-point MaxNum and MinNum. 


Configurations 
There are no configuration notes. 


Usage constraints 
Accessing the MVFR2_EL1 
To access the MVFR2_ELI1: 
MRS <Xt>, MVFR2_EL1 ; Read MVFR2_EL1 into Xt 


Register access is encoded as follows: 


Table B5-6 MVFR2_EL1 access encoding 





op0 | op1 | CRn | CRm | op2 




















11 | 000 |0000}0011 | 010 
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B5 Advanced SIMD and floating-point registers 
B5.6 MVFR2_EL1, Media and VFP Feature Register 2, EL1 








This register is accessible as follows: 
ELO | EL1(NS) | EL1(S) | EL2 | EL3 (SCR.NS = 1) | EL3(SCR.NS = 0) 
- RO RO RO |RO RO 
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B5 Advanced SIMD and floating-point registers 
B5.7 AArch32 register summary 


B5.7 AArch32 register summary 
The core has one Advanced SIMD and floating-point system registers in the AArch32 execution state. 


The following table gives a summary of the Cortex-A76 core Advanced SIMD and floating-point system 
registers in the AArch32 execution state. 


Table B5-7 AArch32 Advanced SIMD and floating-point system registers 





Name Type Reset Description 








FPSCR RW UNKNOWN See B5.8 FPSCR, Floating-Point Status and Control Register 
on page B5-360. 

















See the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile for information on 
permitted accesses to the Advanced SIMD and floating-point system registers. 
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B5.8 FPSCR, Floating-Point Status and Control Register 


The FPSCR provides floating-point system status information and control. 


Bit field descriptions 
FPSCR is a 32-bit register. 


31 30 29 28 27 26 25 24 23 22 21 201918 1615 876543 210 








ac— L_FZ16 L_Ipc L_joc 
AHP DZC 
DN OFC 
FZ UFC 
RMode IXC 
Stride 
RESO 


Figure B5-6 FPSCR bit assignments 


N, [31] 
Floating-point Negative condition code flag. 
Set to | if. floating-point comparison operation produces a less than result. 
Z, [30] 
Floating-point Zero condition code flag. 
Set to | if. floating-point comparison operation produces an equal result. 
C, [29] 
Floating-point Carry condition code flag. 
Set to 1 if. a floating-point comparison operation produces an equal, greater than, or unordered 
result. 
V, [28] 
Floating-point Overflow condition code flag. 
Set to 1 if. floating-point comparison operation produces an unordered result. 
QC, [27] 


Cumulative saturation bit. 


This bit is set to 1 to indicate that an Advanced SIMD integer operation has saturated after 0 was 
last written to this bit. 


AHP, [26] 
Alternative Half-Precision control bit: 
) IEEE half-precision format selected. This is the reset value. 
1 Alternative half-precision format selected. 

DN, [25] 


Default NaN mode control bit: 
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7) NaN operands propagate through to the output of a floating-point operation. This is the 
reset value. 


1 Any operation involving one or more NaNs returns the Default NaN. 


The value of this bit only controls floating-point arithmetic. AArch32 Advanced SIMD 
arithmetic always uses the Default NaN setting, regardless of the value of the DN bit. 


FZ, [24] 
Flush-to-zero mode control bit: 
7) Flush-to-zero mode disabled. Behavior of the floating-point system is fully compliant 
with the IEEE 754 standard. This is the reset value. 
1 Flush-to-zero mode enabled. 


The value of this bit only controls floating-point arithmetic. AArch32 Advanced SIMD 
arithmetic always uses the Flush-to-zero setting, regardless of the value of the FZ bit. 


RMode, [23:22] 
Rounding Mode control field: 
@bee@ = =Round to Nearest (RN) mode. This is the reset value. 
@be@1 = Round towards Plus Infinity (RP) mode. 


@b1@ Round towards Minus Infinity (RM) mode. 
@b11 Round towards Zero (RZ) mode. 


The specified rounding mode is used by almost all floating-point instructions. AArch32 
Advanced SIMD arithmetic always uses the Round to Nearest setting, regardless of the value of 
the RMode bits. 


Stride, [21:20] 


RESO Reserved. 


FZ16, [19] 
Flush-to-zero mode control bit on half-precision data-processing instructions: 
) Flush-to-zero mode disabled. Behavior of the floating-point system is fully compliant 
with the IEEE 754 standard. 
1 Flush-to-zero mode enabled. 


Len, [18:16] 


RESO Reserved. 


RESO, [15:8] 
RESO Reserved. 
IDC, [7] 


Input Denormal cumulative exception bit. This bit is set to 1 to indicate that the Input Denormal 
exception has occurred since 0 was last written to this bit. 


RESO, [6:5] 
RESO Reserved. 
IXC, [4] 


Inexact cumulative exception bit. This bit is set to 1 to indicate that the Inexact exception has 
occurred since 0 was last written to this bit. 
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UFC, [3] 


Underflow cumulative exception bit. This bit is set to | to indicate that the Underflow exception 
has occurred since 0 was last written to this bit. 


OFC, [2] 


Overflow cumulative exception bit. This bit is set to 1 to indicate that the Overflow exception 
has occurred since 0 was last written to this bit. 


DZC, [1] 


Division by Zero cumulative exception bit. This bit is set to | to indicate that the Division by 
Zero exception has occurred since 0 was last written to this bit. 


10C, [0] 


Invalid Operation cumulative exception bit. This bit is set to 1 to indicate that the Invalid 
Operation exception has occurred since 0 was last written to this bit. 


Configurations 
There is one copy of this register that is used in both Secure and Non-secure states. 


The named fields in this register map to the equivalent fields in the AArch64 FPCR and FPSR. 
See B5.2 FPCR, Floating-point Control Register on page B5-349 and B5.3 FPSR, Floating- 
point Status Register on page B5-351 


Usage constraints 
Accessing the FPSCR 
To access the FPSCR: 


VMRS <Rt>, FPSCR ; Read FPSCR into Rt 
VMSR FPSCR, <Rt> ; Write Rt to FPSCR 


Register access is encoded as follows: 


Table B5-8 FPSCR access encoding 





spec_reg 





0001 











Note 


The Cortex-A76 core implementation does not support the deprecated VFP short vector feature. 
Attempts to execute the associated VFP data-processing instructions result in an UNDEFINED Instruction 














exception. 
Accessibility 
This register is accessible as follows: 
ELO /ELO/EL1 |EL1/EL2|eL3 EL3 
(NS) |(S) |(NS)|(S) (SCR.NS = 1) | (SCR.NS = 0) 
Config | RW | - - - - - 





























Access to this register depends on the values of CPACR_EL1.FPEN, CPTR_EL2.FPEN, 
CPTR_EL2.TFP, CPTR_EL3.TFP, and HCR_EL2.{E2H, TGE}. For details of which values of these 
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fields allow access at which Exception levels, see the Arm® Architecture Reference Manual Armv8, for 
Armv8-A architecture profile. 
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Debug descriptions 


Chapter C1 
Debug 


This chapter describes the Cortex-A76 core debug registers and shows examples of how to use them. 


It contains the following sections: 

¢ Cl.1 About debug methods on page C1-368. 

¢ Cl.2 Debug register interfaces on page C1-369. 
* C1.3 Debug events on page C1-371. 

¢ C1.4 External debug interface on page C1-372. 
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C1.1 About debug methods 


C1.1 About debug methods 


The core is part of a debug system and supports both self-hosted and external debug. 


The following figure shows a typical external debug system. 


























Debug host Protocol Debug target 
converter >| 
Core 
| 
Debug 
unit 























Figure C1-1 External debug system 


Debug host 
A computer, for example a personal computer, that is running a software debugger such as the 
DS-5 Debugger. With the debug host, you can issue high-level commands, such as setting a 
breakpoint at a certain location or examining the contents of a memory address. 


Protocol converter 
The debug host sends messages to the debug target using an interface such as Ethernet. 
However, the debug target typically implements a different interface protocol. A device such as 
DSTREAM is required to convert between the two protocols. 


Debug target 


The lowest level of the system implements system support for the protocol converter to access 
the debug unit using the Advanced Peripheral Bus (APB) slave interface. An example of a 
debug target is a development system with a test chip or a silicon part with a core. 


Debug unit 
Helps debugging software that is running on the core: 


¢ Hardware systems that are based on the core. 
* Operating systems. 
¢ Application software. 


With the debug unit, you can: 

¢ Stop program execution. 

¢ Examine and alter process and coprocessor state. 

¢ Examine and alter memory and the state of the input or output peripherals. 
¢ Restart the core. 


For self-hosted debug, the debug target runs additional debug monitor software that runs on the 
Cortex-A76 core itself. This way, it does not require expensive interface hardware to connect a second 
host computer. 
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C1.2 Debug register interfaces 


C1.2 Debug register interfaces 
The Debug architecture defines a set of debug registers. 


The debug register interfaces provide access to these registers from: 


¢ Software running on the core. 
« An external debugger. 


The Cortex-A76 core implements the Armv8 Debug architecture and debug events as described in the 
Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile. It also implements 
improvements to Debug introduced in Armv8.1 and Armv8.2. 


C1.2.1 Core interfaces 
System register access allows the core to directly access certain debug registers. 


The external debug interface enables both external and self-hosted debug agents to access debug 
registers. Access to the debug registers is partitioned as follows: 


Debug registers 
This function is system register based and memory-mapped. You can access the debug register 
map using the APB slave port. 


Performance monitor 
This function is system register based and memory-mapped. You can access the performance 
monitor registers using the APB slave port. 


Activity monitor 
This function is system register based and memory-mapped. You can access the activity monitor 
registers using the APB slave port. 


Trace registers 
This function is memory-mapped. 


ELA registers 

This function is memory-mapped. 
Related references 
C1.4 External debug interface on page C1-372 


C1.2.2 Breakpoints and watchpoints 


The core supports six breakpoints, four watchpoints, and a standard Debug Communications Channel 
(DCC). 


A breakpoint consists of a breakpoint control register and a breakpoint value register. These two registers 
are referred to as a Breakpoint Register Pair (BRP). 


Four of the breakpoints (BRP 0-3) match only to virtual address and the other two (BRP 4 and 5) match 
against either virtual address or context ID, or VMID. All the watchpoints can be linked to two 
breakpoints (BRP 4 and 5) to enable a memory request to be trapped in a given process context. 


C1.2.3 Effects of resets on debug registers 
The core has the following reset signals that affect the debug registers: 


nCPUPORESET 
This signal initializes the core logic, including the debug, ETM trace unit, breakpoint, 
watchpoint logic, and performance monitors logic. This maps to a Cold reset that covers reset of 
the core logic and the integrated debug functionality. 


nCORERESET 
This signal resets some of the debug and performance monitor logic. This maps to a Warm reset 
that covers reset of the core logic. 
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C1.2 Debug register interfaces 




















C1.2.4 External access permissions to debug registers 
External access permission to the debug registers is subject to the conditions at the time of the access. 
The following table describes the core response to accesses through the external debug interface. 
Table C1-1 External access conditions to registers 
Name | Condition Description 
Off EDPRSR.PU is 0 Core power domain is completely off, or in a low-power state where the 
core power domain registers cannot be accessed. 
If debug power is off, then all external debug and memory-mapped register 
accesses return an error. 
DLK_ | DoubleLockStatus() == TRUE OS Double Lock is locked. 
(EDPRSR.DLK is 1) 
OSLK | OSLSR_EL1.OSLK is 1 OS Lock is locked. 
EDAD | AllowExternalDebugAccess() ==FALSE | External debug access is disabled. When an error is returned because of an 
EDAD condition code, and this is the highest priority error condition, 
EDPRSR.SDAD is set to 1. Otherwise SDAD is unchanged. 
Default | - None of the conditions apply, normal access. 

















The following table shows an example of external register access condition codes for access to a 
performance monitor register. To determine the access permission for the register, scan the columns from 
left to right. Stop at the first column a condition is true, the entry gives the access permission of the 


register and scanning stops. 


Table C1-2 External register condition code example 





Off | DLK | OSLK | EDAD | Default 





Zeal eae : RO 
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C1.3 Debug events 


C1.3 Debug events 
A debug event can be a software debug event or a halting debug event. 


A core responds to a debug event in one of the following ways: 
¢ Ignores the debug event. 

¢ Takes a debug exception. 

¢ Enters debug state. 


See the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile for more 
information about the debug events. 

C1.3.1 Watchpoint debug events 
In the Cortex-A76 core, watchpoint debug events are always synchronous. 


Memory hint instructions and cache clean operations, except DC _ZVA and DC IVAC, do not generate 
watchpoint debug events. Store exclusive instructions generate a watchpoint debug event even when the 
check for the control of exclusive monitor fails. Atomic CAS instructions generate a watchpoint debug 
event even when the compare operation fails. 


C1.3.2 Debug OS Lock 
Debug OS Lock is set by the powerup reset, nCPUPORESET. 


For normal behavior of debug events and debug register accesses, Debug OS Lock must be cleared. For 
more information, see the Arm® Architecture Reference Manual Armvé, for Armv8-A architecture profile. 
Related references 

C1.4 External debug interface on page C1-372 

A3.1 About clocks, resets, and input synchronization on page A3-42 
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C1.4 External debug interface 


C1.4 External debug interface 


For information about external debug interface, including debug memory map and debug signals, see the 
Arm® DynamIQ™ Shared Unit Technical Reference Manual. 
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Chapter C2 
Performance Monitor Unit 


This chapter describes the Performance Monitor Unit (PMU) and the registers that it uses. 


It contains the following sections: 

¢ (2.1 About the PMU on page C2-374. 

* C2.2 PMU functional description on page C2-375. 
¢ C2.3 PMU events on page C2-376. 

© C2.4 PMU interrupts on page C2-385. 

* (2.5 Exporting PMU events on page C2-386. 
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C2.1 About the PMU 


The Cortex-A76 core includes performance monitors that enable you to gather various statistics on the 
operation of the core and its memory system during runtime. These provide useful information about the 
behavior of the core that you can use when debugging or profiling code. 


The PMU provides six counters. Each counter can count any of the events available in the core. The 
absolute counts recorded might vary because of pipeline effects. This has negligible effect except in 
cases where the counters are enabled for a very short time. 


Related references 
C2.3 PMU events on page C2-376 
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C2.2 PMU functional description 
This section describes the functionality of the PMU. 
The PMU includes the following interfaces and counters: 


Event interface 
Events from all other units from across the design are provided to the PMU. 


System register and APB interface 
You can program the PMU registers using the system registers or the external APB interface. 


Counters 
The PMU has 32-bit counters that increment when they are enabled, based on events, and a 64- 
bit cycle counter. 


PMU register interfaces 
The Cortex-A76 core supports access to the performance monitor registers from the internal 
system register interface and a memory-mapped interface. 


C2.2.1 External register access permissions 
Whether or not access is permitted to a register depends on: 


¢ Ifthe core is powered up. 

¢ The state of the OS Lock and OS Double Lock. 

¢ The state of External Performance Monitors access disable. 
¢ The state of the debug authentication inputs to the core. 


The behavior is specific to each register and is not described in this document. For a detailed description 
of these features and their effects on the registers, see the Arm® Architecture Reference Manual Arm®v8, 
for Arm®v8s-A architecture profile. 


The register descriptions provided in this manual describe whether each register is read/write or read- 
only. 
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C2.3 PMU events 


The following table shows the events that are generated and the numbers that the PMU uses to reference 
the events. The table also shows the bit position of each event on the event bus. Event reference numbers 
that are not listed are reserved. 








Event PMU Event mnemonic Event description 
number | event bus 
(to trace) 
@x@ [00] SW_INCR Software increment. Instruction architecturally executed (condition 


code check pass). 





@x1 [01] L1I_CACHE_REFILL LI instruction cache refill. This event counts any instruction fetch 
which misses in the cache. 


The following instructions are not counted: 
¢ Cache maintenance instructions. 
* Non-cacheable accesses. 





@x2 [02] LII_TLB_REFILL L1 instruction TLB refill. This event counts any refill of the instruction 
L1 TLB from the L2 TLB. This includes refills that result in a 
translation fault. 


The following instructions are not counted: 


¢ TLB maintenance instructions. 


This event counts regardless of whether the MMU is enabled. 





8x3 [167] LID_CACHE REFILL L1 data cache refill. This event counts any load or store operation or 
page table walk access which causes data to be read from outside the 
L1, including accesses which do not allocate into L1. 


The following instructions are not counted: 

¢ Cache maintenance instructions and prefetches. 

« Stores of an entire cache line, even if they make a coherency 
request outside the L1. 

¢ Partial cache line writes which do not allocate into the L1 cache. 

« Non-cacheable accesses. 


This event counts the sum of LID CACHE REFILL RD and 
LID CACHE REFILL WR. 











Qx4 [05:03] LI1D_CACHE L1 data cache access. This event counts any load or store operation or 
page table walk access which looks up in the L1 data cache. In 
particular, any access which could count the LID CACHE REFILL 
event causes this event to count. 


The following instructions are not counted: 
* Cache maintenance instructions and prefetches. 


¢ Non-cacheable accesses. 


This event counts the sum of LID _CACHE_RD and 
LID_CACHE_ WR. 
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C2.3 PMU events 


(continued) 








Event PMU Event mnemonic Event description 
number | event bus 
(to trace) 
@x5 [07:06] L1D_TLB_ REFILL L1 data TLB refill. This event counts any refill of the data L1 TLB 


from the L2 TLB. This includes refills that result in a translation fault. 
The following instructions are not counted: 


¢ TLB maintenance instructions. 


This event counts regardless of whether the MMU is enabled. 





8x8 [11:08] INST_RETIRED Instruction architecturally executed. This event counts all retired 
instructions, including those that fail their condition check. 





@x9 [12] EXC_TAKEN Exception taken. 





@x0A [13] EXC_RETURN Instruction architecturally executed, condition code check pass, 
exception return. 





@x@B [156] CID_WRITE_RETIRED Instruction architecturally executed, condition code check pass, write to 
CONTEXTIDR. This event only counts writes to CONTEXTIDR in 
AArch32 state, and via the CONTEXTIDR_EL1 mnemonic in 
AArch64 state. 


The following instructions are not counted: 
¢ Writes to CONTEXTIDR_ EL12 and CONTEXTIDR_EL2. 





@x10 [14] BR_MIS_PRED Mispredicted or not predicted branch speculatively executed. This 
event counts any predictable branch instruction which is mispredicted 
either due to dynamic misprediction or because the MMU is off and the 
branches are statically predicted not taken. 





@x11 [15] CPU_CYCLES Cycle 





@x12 [16] BR_PRED Predictable branch speculatively executed. This event counts all 
predictable branches. 





8x13 [19:17] MEM_ACCESS Data memory access. This event counts memory accesses due to load 
or store instructions. 


The following instructions are not counted: 
¢ Instruction fetches. 

* Cache maintenance instructions. 

¢ Translation table walks or prefetches. 


This event counts the sum of MEM ACCESS RD and 
MEM ACCESS WR. 








@x14 [20] L1I_CACHE Level | instruction cache access or Level 0 Macro-op cache access. 
This event counts any instruction fetch which accesses the L1 
instruction cache or LO Macro-op cache. 

The following instructions are not counted: 

* Cache maintenance instructions. 

* Non-cacheable accesses. 
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C2.3 PMU events 


(continued) 








Event PMU Event mnemonic Event description 
number | event bus 
(to trace) 
@x15 [21] LID_CACHE_WB L1 data cache Write-Back. This event counts any write-back of data 


from the L1 data cache to L2 or L3. This counts both victim line 
evictions and snoops, including cache maintenance operations. 


The following instructions are not counted: 

¢ Invalidations which do not result in data being transferred out of 
the L1. 

¢  Full-line writes which write to L2 without writing L1, such as write 
streaming mode. 





@x16 [24:22] L2D_CACHE L2 data cache access. This event counts any transaction from L1 which 
looks up in the L2 cache, and any write-back from the L1 to the L2. 
Snoops from outside the core and cache maintenance operations are not 
counted. 





@x17 [27:25] L2D_CACHE REFILL L2 data cache refill. This event counts any cacheable transaction from 
L1 which causes data to be read from outside the core. L2 refills caused 
by stashes into L2 should not be counted. 





8x18 [30:28] L2D_CACHE WB L2 data cache write-back. This event counts any write-back of data 
from the L2 cache to outside the core. This includes snoops to the L2 
which return data, regardless of whether they cause an invalidation. 
Invalidations from the L2 which do not write data outside of the core 
and snoops which return data from the L1 are not counted. 





8x19 [32:31] BUS_ACCESS Bus access. This event counts for every beat of data transferred over the 
data channels between the core and the SCU. If both read and write 
data beats are transferred on a given cycle, this event is counted twice 
on that cycle. This event counts the sum of BUS_ACCESS_RD and 
BUS_ACCESS_WR. 





@x1A [33] MEMORY_ERROR Local memory error. This event counts any correctable or uncorrectable 
memory error (ECC or parity) in the protected core RAMs. 





@x1B [36:34] INST_SPEC Operation speculatively executed 





@x1C [37] TTBR_WRITE_RETIRED Instruction architecturally executed, condition code check pass, write to 
TTBR.This event only counts writes to TTBRO/TTBR1 in AArch32 
state and TTBRO_EL1/TTBR1_EL1 in AArch64 state. 


The following instructions are not counted: 
« Accesses to TTBRO_EL12/TTBR1_EL12 or TTBRO_EL2/ 











TTBRI1_EL2. 
8x1D [38] BUS_CYCLES Bus cycles. This event duplicates CPU_CYCLES. 
Ox1E [39] CHAIN For odd-numbered counters, increments the count by one for each 


overflow of the preceding even-numbered counter. For even-numbered 
counters, there is no increment. 
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C2 Performance Monitor Unit 
C2.3 PMU events 


(continued) 





Event 
number 


PMU 
event bus 
(to trace) 


Event mnemonic 


Event description 





Qx20 


[41:40] 


L2D_CACHE ALLOCATE 


L2 data cache allocation without refill. This event counts any full cache 
line write into the L2 cache which does not cause a linefill, including 
write-backs from L1 to L2 and full-line writes which do not allocate 
into L1. 





@x21 


BR_RETIRED 


Instruction architecturally executed, branch. This event counts all 
branches, taken or not. This excludes exception entries, debug entries 
and CCFAIL branches. 





@x22 


[43] 


BR_MIS_PRED_ RETIRED 


Instruction architecturally executed, mispredicted branch. This event 
counts any branch counted by BR_RETIRED which is not correctly 
predicted and causes a pipeline flush. 





@x23 


[44] 


STALL_FRONTEND 


No operation issued because of the frontend. The counter counts on any 
cycle when there are no fetched instructions available to dispatch. 





@x24 


[45] 


STALL_BACKEND 


No operation issued because of the backend. The counter counts on any 
cycle fetched instructions are not dispatched due to resource 
constraints. 





@x25 


[48:46] 


L1D_TLB 


Level 1 data TLB access. This event counts any load or store operation 
which accesses the data L1 TLB. If both a load and a store are executed 
on a cycle, this event counts twice. This event counts regardless of 
whether the MMU is enabled. 





@x26 


[168] 


L1LTLB 


Level | instruction TLB access. This event counts any instruction fetch 
which accesses the instruction L1 TLB.This event counts regardless of 
whether the MMU is enabled. 





@x29 


[157] 


L3D_CACHE ALLOCATE 


Attributable L3 data or unified cache allocation without refill. This 
event counts any full cache line write into the L3 cache which does not 
cause a linefill, including write-backs from L2 to L3 and full-line 
writes which do not allocate into L2. 





@x2A 


[159:158] 


L3D_CACHE REFILL 


Attributable Level 3 unified cache refill. 


This event counts for any cacheable read transaction returning data 
from the SCU for which the data source was outside the cluster. 
Transactions such as ReadUnique are counted here as 'read' 
transactions, even though they can be generated by store instructions. 








@x2B 


[160] 


L3D_CACHE 


Attributable Level 3 unified cache access. 


This event counts for any cacheable read transaction returning data 
from the SCU, or for any cacheable write to the SCU. 





@x2D 


[49] 





L2D_TLB_REFILL 





Attributable L2 data or unified TLB refill. This event counts on any 
refill of the L2 TLB, caused by either an instruction or data access. 
This event does not count if the MMU is disabled. 
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C2 Performance Monitor Unit 
C2.3 PMU events 


(continued) 








Event PMU Event mnemonic Event description 
number | event bus 
(to trace) 
Ox2F [51:50] L2D_TLB Attributable L2 data or unified TLB access. This event counts on any 


access to the L2 TLB (caused by a refill of any of the L1 TLBs). This 
event does not count if the MMU is disabled. 





@x31 [161] REMOTE_ACCESS Access to another socket in a multi-socket system. 





0x34 [52] DTLB_WALK Access to data TLB that caused a page table walk. This event counts on 
any data access which causes L2D_TLB_ REFILL to count. 








8x35 [53] ITLB_WALK Access to instruction TLB that caused a page table walk. This event 
counts on any instruction access which causes L2D_TLB_ REFILL to 
count. 

0x36 [163:162] |LL CACHE RD Last level cache access, read. 


¢ IfCPUECTLR.EXTLLC is set: This event counts any cacheable 
read transaction which returns a data source of "interconnect cache’. 

« IfCPUECTLR.EXTLLC is not set: This event is a duplicate of the 
L*D_CACHE RD event corresponding to the last level of cache 
implemented - L3D_CACHE RD if both per-core L2 and cluster 
L3 are implemented, L2D_ CACHE _RD if only one is 
implemented, or LID_CACHE RD if neither is implemented. 





@x37 [165:164] | LL_CACHE_MISS_RD Last level cache miss, read. 


« IfCPUECTLR.EXTLLC is set: This event counts any cacheable 
read transaction which returns a data source of 'DRAM', 'remote' or 
‘inter-cluster peer’. 

« IfCPUECTLR.EXTLLC is not set: This event is a duplicate of the 
L*D_CACHE REFILL _RD event corresponding to the last level 
of cache implemented - L3D_ CACHE REFILL_RD if both per- 
core L2 and cluster L3 are implemented, 

L2D_CACHE REFILL RD if only one is implemented, or 
L1D_CACHE REFILL RD if neither is implemented. 

















Qx4@ [] LID_CACHE_RD L1 data cache access, read. This event counts any load operation or 
page table walk access which looks up in the L1 data cache. In 
particular, any access which could count the 

L1ID_CACHE_ REFILL RD event causes this event to count. 





The following instructions are not counted: 


¢ Cache maintenance instructions and prefetches. 
« Non-cacheable accesses. 





0x41 [57:56] LID_CACHE_ WR LI data cache access, write. This event counts any store operation 
which looks up in the L1 data cache. In particular, any access which 
could count the LID CACHE REFILL WR event causes this event to 
count. 





The following instructions are not counted: 


* Cache maintenance instructions and prefetches. 
« Non-cacheable accesses. 
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C2.3 PMU events 


(continued) 











Event PMU Event mnemonic Event description 
number _ | event bus 
(to trace) 
@x42 [58] LID_CACHE_REFILL_RD L1 data cache refill, read. This event counts any load operation or page 


table walk access which causes data to be read from outside the L1, 
including accesses which do not allocate into L1. 


The following instructions are not counted: 


¢ Cache maintenance instructions and prefetches. 
« Non-cacheable accesses. 








8x43 [59] LID_CACHE REFILL_WR L1 data cache refill, write. This event counts any store operation which 
causes data to be read from outside the L1, including accesses which do 
not allocate into L1. 


The following instructions are not counted: 

* Cache maintenance instructions and prefetches. 

¢ Stores of an entire cache line, even if they make a coherency 
request outside the L1. 

¢ Partial cache line writes which do not allocate into the L1 cache. 

¢ Non-cacheable accesses. 








@x44 [60] LID_CACHE_REFILL_INNER | [1 data cache refill, inner. This event counts any L1 D-cache linefill (as 
counted by LID_CACHE_ REFILL) which hits in the L2 cache, L3 
cache or another core in the cluster. 





8x45 [61] LID_CACHE_REFILL_OUTER | {1 data cache refill, outer. This event counts any L1 D-cache linefill (as 
counted by LID CACHE _ REFILL) which does not hit in the L2 
cache, L3 cache or another core in the cluster, and instead obtains data 





from outside the cluster. 





























@x46 [62] LID_CACHE WB _ VICTIM L1 data cache write-back, victim 

Qx47 [63] L1ID_CACHE WB CLEAN L1 data cache write-back cleaning and coherency 

0x48 [64] L1D_CACHE_INVAL L1 data cache invalidate. 

@x4C [65] L1D_TLB_REFILL_RD LI data TLB refill, read. 

@x4D [66] L1D_TLB_REFILL_WR LI data TLB refill, write. 

Ox4E [68:67] LID_TLB_ RD L1 data TLB access, read. 

Ox4F [70:69] L1D_TLB_WR L1 data TLB access, write. 

8x58 [72:71] L2D_CACHE RD L2 data cache access, read. This event counts any read transaction from 


L1 which looks up in the L2 cache. 


Snoops from outside the core are not counted. 








@x51 [74:73] L2D_CACHE_WR L2 data cache access, write. This event counts any write transaction 
from L1 which looks up in the L2 cache or any write-back from L1 
which allocates into the L2 cache. 


Snoops from outside the core are not counted. 
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C2 Performance Monitor Unit 
C2.3 PMU events 


(continued) 











Event PMU Event mnemonic Event description 
number | event bus 
(to trace) 
@x52 [76:75] L2D_CACHE_REFILL_RD L2 data cache refill, read. This event counts any cacheable read 


transaction from L1 which causes data to be read from outside the core. 
L2 refills caused by stashes into L2 should not be counted. Transactions 
such as ReadUnique are counted here as 'read' transactions, even 
though they can be generated by store instructions. 





8x53 [78:77] L2D_CACHE REFILL_WR L2 data cache refill, write. This event counts any write transaction from 
L1 which causes data to be read from outside the core. L2 refills caused 





by stashes into L2 should not be counted. Transactions such as 
ReadUnique are not counted as write transactions. 





























@x56 [80:79] L2D_CACHE WB _ VICTIM L2 data cache write-back, victim. 

@x57 [82:81] L2D_CACHE WB CLEAN L2 data cache write-back, cleaning and coherency. 

@x58 [84:83] L2D_CACHE_INVAL L2 data cache invalidate. 

@x5C [85] L2D_TLB_ REFILL RD L2 data or unified TLB refill, read. 

@x5D [86] L2D_TLB_ REFILL WR L2 data or unified TLB refill, write. 

@x5E [88:87] L2D_TLB RD L2 data or unified TLB access, read. 

@x5F [89] L2D_TLB_ WR L2 data or unified TLB access, write. 

8x60 [90] BUS_ACCESS RD Bus access read. This event counts for every beat of data transferred 
over the read data channel between the core and the SCU. 

8x61 [91] BUS_ACCESS WR Bus access write. This event counts for every beat of data transferred 





over the write data channel between the core and the SCU. 





Ox66 [93:92] MEM_ACCESS_RD Data memory access, read. This event counts memory accesses due to 
load instructions. The following instructions are not counted: 


* Instruction fetches. 
¢ Cache maintenance instructions. 
¢ Translation table walks. 


¢ Prefetches. 





@x67 [95:94] MEM_ACCESS_WR Data memory access, write. This event counts memory accesses due to 
store instructions. 


The following instructions are not counted: 
¢ Instruction fetches. 

* Cache maintenance instructions. 

¢ Translation table walks. 


¢ Prefetches. 





























@x68 [97:96] UNALIGNED_ LD SPEC Unaligned access, read 
@x69 [99:98] UNALIGNED_ST_SPEC Unaligned access, write 
@x6A [{102:100] | UNALIGNED LDST_SPEC Unaligned access 
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C2 Performance Monitor Unit 
C2.3 PMU events 


(continued) 














































































































Event PMU Event mnemonic Event description 
number | event bus 
(to trace) 
@x6C [103] LDREX_ SPEC Exclusive operation speculatively executed, LDREX or LDX. 
@x6D [104] STREX_PASS SPEC Exclusive operation speculatively executed, STREX or STX pass. 
@x6E [105] STREX_FAIL SPEC Exclusive operation speculatively executed, STREX or STX fail. 
Ox6F [106] STREX_SPEC Exclusive operation speculatively executed, STREX or STX. 
@x70 [109:107] LD_SPEC Operation speculatively executed, load. 
Qx71 {112:110] ST_SPEC Operation speculatively executed, store. 
Qx72 [114:113] LDST_SPEC Operation speculatively executed, load or store. This event counts the 
sum of LD_SPEC and ST_SPEC. 
@x73 ({117:115] DP_SPEC Operation speculatively executed, integer data-processing. 
@x74 [120:118] ASE_SPEC Operation speculatively executed, Advanced SIMD instruction. 
@x75 (123:121] VFP_SPEC Operation speculatively executed, floating-point instruction. 
@x76 {125:124] PC_WRITE_SPEC Operation speculatively executed, software change of the PC. 
Ox77 ({128:126] CRYPTO_SPEC Operation speculatively executed, Cryptographic instruction. 
x78 {129] BR_IMMED_ SPEC Branch speculatively executed, immediate branch. 
@x79 [130] BR_RETURN_SPEC Branch speculatively executed, procedure return. 
@x7A {131] BR_INDIRECT_ SPEC Branch speculatively executed, indirect branch. 
@x7C [132] ISB_SPEC Barrier speculatively executed, ISB. 
@x7D (134:133] DSB_ SPEC Barrier speculatively executed, DSB. 
@x7E ({136:135] DMB _SPEC Barrier speculatively executed, DMB. 
@x81 [137] EXC_UNDEF Counts the number of undefined exceptions taken locally. 
Qx82 [138] EXC_SVC Exception taken locally, Supervisor Call. 
0x83 [139] EXC_PABORT Exception taken locally, Instruction Abort. 
0x84 [140] EXC_DABORT Exception taken locally, Data Abort and SError. 
@x86 [141] EXC_IRQ Exception taken locally, IRQ. 
Qx87 [142] EXC_FIQ Exception taken locally, FIQ. 
0x88 [143] EXC_SMC Exception taken locally, Secure Monitor Call. 
Ox8A [144] EXC_HVC Exception taken locally, Hypervisor Call. 
@x8B [145] EXC_TRAP_ PABORT Exception taken, Instruction Abort not taken locally. 
@x8C [146] EXC_TRAP_DABORT Exception taken, Data Abort or SError not taken locally. 
@x8D [147] EXC_TRAP OTHER Exception taken, Other traps not taken locally. 
Ox8E [148] EXC_TRAP IRQ Exception taken, IRQ not taken locally. 
Ox8F [149] EXC_TRAP FIQ Exception taken, FIQ not taken locally. 
0x90 [152:150] RC_LD_ SPEC Release consistency operation speculatively executed, load-acquire. 
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C2 Performance Monitor Unit 
C2.3 PMU events 


(continued) 





























Event PMU Event mnemonic Event description 
number _ | event bus 
(to trace) 
@x91 [155:153] | RC_ST_SPEC Release consistency operation speculatively executed, store-release. 
@xA@ [166] L3_CACHE RD L3 cache read. 
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C2 Performance Monitor Unit 
C2.4 PMU interrupts 


C2.4 PMU interrupts 
The Cortex-A76 core asserts the nPMUIRQ signal when the PMU generates an interrupt. 


You can route this signal to an external interrupt controller for prioritization and masking. This is the 
only mechanism that signals this interrupt to the core. 


This interrupt is also driven as a trigger input to the CTI. See the Arm® DynamIQ™ Shared Unit Technical 
Reference Manual for more information. 
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C2 Performance Monitor Unit 
C2.5 Exporting PMU events 


C2.5 Exporting PMU events 


Some of the PMU events are exported to the ETM trace unit to be monitored. 


Note 


The PMUEVENT bus is not exported to external components. This is because the event bus cannot 
safely cross an asynchronous boundary when events can be generated on every cycle. 











100798 _0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights C2-386 
reserved. 
Non-Confidential 


Chapter C3 
Activity Monitor Unit 


This chapter describes the Activity Monitor Unit (AMU). 


It contains the following sections: 

¢« (C3.1 About the AMU on page C3-388. 

¢ (3.2 Accessing the activity monitors on page C3-389. 
¢ C3.3 AMU counters on page C3-390. 

* (C3.4 AMU events on page C3-391. 
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C3 Activity Monitor Unit 
C3.1 About the AMU 


C3.1 About the AMU 


The Cortex-A76 core includes activity monitoring. It has features in common with performance 
monitoring, but is intended for system management use whereas performance monitoring is aimed at 
user and debug applications. 


The activity monitors provide useful information for system power management and persistent 
monitoring. The activity monitors are read-only in operation and their configuration is limited to the 
highest Exception level implemented. 


The Cortex-A76 core implements five counters, 0-4, and activity monitoring is only implemented in 
AArch64. 
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C3 Activity Monitor Unit 
C3.2 Accessing the activity monitors 


C3.2 Accessing the activity monitors 
The activity monitors can be accessed by: 
* Core system registers. 
*« Memory-mapped access using the debug APB interface. 
C3.2.1 Access enable bit 
The access enable bit for traps on accesses to activity monitor registers is required at EL2 and EL3. 


In the Cortex-A76 core, the AMEN[A4] bit in registers ACTLR_EL2 and ACTLR_EL3 controls the 
activity monitor registers enable. 
Note 


In the Cortex-A76 core, the AMEN[4] bit is REso in ACTLR and HACTLR. Activity monitors are not 
implemented in AArch32. 








C3.2.2 System register access 


The core implements activity monitoring in AArch64 and the activity monitors can be accessed using the 
MRS and MSR instructions. 


C3.2.3 External memory-mapped access 
Activity monitors can also be memory-mapped accessed from the APB debug interface. 


In this case, the AMU registers just provide debug information and are read-only. 
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C3 Activity Monitor Unit 
C3.3 AMU counters 


C3.3 AMU counters 


The Cortex-A76 core implements five counters, 0-4. The activity monitor counters, AMEVCNTRO-4, 
have the following characteristics: 


All events are counted in 64-bit wrapping counters that overflow when they wrap. There is no support 
for overflow status indication or interrupts. 

Counters monitoring cycle events do not increment when the core is in WFI or WFE state. 

Events 0, 1, 2, 3, and 4 are fixed, and the AMEVTYPER<n> evtCount bits are read-only. 
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C3.4 AMU events 


The following table describes the counters that are implemented in the Cortex-A76 core and the mapping 
to fixed and programmable events. 


C3 Activity Monitor Unit 
C3.4 AMU events 


Table C3-1 Mapping of counters to fixed events 












































Activity Event Event Event Description 

monitor type number 

counter <n> 

0 Fixed Cycles at core @x11 Cycles count. 

frequency 
1 Fixed Cycles at constant | @xEF This counter is used to replicate the generic system counter that is 
frequency incremented on a constant basis, and not incremented depending on 
the PE frequency core. 

2 Fixed Instructions retired | 0x08 Instruction architecturally executed. This counter increments for 
every instruction that is executed architecturally, including 
instructions that fail their condition code check. 

3 Fixed First miss OxFe@ The first miss event tracks whether any external load miss is 
outstanding and starts counting only from a first-miss until data 
returns for that miss. The counter does not count for any remaining 
part of overlapping accesses, only counting again when the first- 
miss condition is re-detected. 

4 Fixed High activity OxF1 Instructions executing through the design which act as a hint for 
potential high power activity. 

Note 


To program AMU counter 4, you need to program the AMEVTYPER4 EL register. For more 
information, see D8.7 AMEVTYPERn_ELO, Activity Monitor Event Type Register, ELO on page D8-492. 
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C3 Activity Monitor Unit 
C3.4 AMU events 
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Chapter C4 
Embedded Trace Macrocell 


This chapter describes the ETM for the Cortex-A76 core. 


It contains the following sections: 

¢ C4.1 About the ETM on page C4-394. 

¢ C4.2 ETM trace unit generation options and resources on page C4-395. 

¢ C4.3 ETM trace unit functional description on page C4-397. 

¢ (4.4 Resetting the ETM on page C4-398. 

¢ C4.5 Programming and reading ETM trace unit registers on page C4-399. 
¢ C4.6 ETM trace unit register interfaces on page C4-400. 

¢ (4.7 Interaction with the PMU and Debug on page C4-401. 
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C4 Embedded Trace Macrocell 
C4.1 About the ETM 


C4.1 About the ETM 


The ETM trace unit is a module that performs real-time instruction flow tracing based on the ETMv4 
architecture. The ETM is a CoreSight component, and is an integral part of the Arm Real-time Debug 
solution, DS-5 Development Studio. 


See the Arm® Embedded Trace Macrocell Architecture Specification ETMyv4 for more information. 
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C4 Embedded Trace Macrocell 
C4.2 ETM trace unit generation options and resources 


C4.2 ETM trace unit generation options and resources 


The following table shows the trace generation options implemented in the Cortex-A76 ETM trace unit. 


Table C4-1 ETM trace unit generation options implemented 


























Description Configuration 
Instruction address size in bytes 8 

Data address size in bytes 0 

Data value size in bytes 0 

Virtual Machine ID size in bytes 4 

Context ID size in bytes 4 

Support for conditional instruction tracing Not implemented 
Support for tracing of data Not implemented 





Support for tracing of load and store instructions as PO elements | Not implemented 












































Support for cycle counting in the instruction trace Implemented 
Support for branch broadcast tracing Implemented 
Number of events supported in the trace 4 

Return stack support Implemented 
Tracing of SError exception support Implemented 
Instruction trace cycle counting minimum threshold l 

Size of Trace ID 7 bits 
Synchronization period support Read-write 
Global timestamp size 64 bits 

Number of cores available for tracing 1 

ATB trigger support Implemented 
Low power behavior override Not implemented 
Stall control support Implemented 
Support for overflow avoidance Not implemented 





Support for using CONTEXTIDR_EL2 in VMID comparator | Implemented 














The following table shows the resources implemented in the Cortex-A76 ETM trace unit. 


Table C4-2 ETM trace unit resources implemented 
































Description Configuration 
Number of resource selection pairs implemented 8 
Number of external input selectors implemented 4 
Number of external inputs implemented 165, 4 CTI + 161 PMU 
Number of counters implemented 2 
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C4 Embedded Trace Macrocell 
C4.2 ETM trace unit generation options and resources 


Table C4-2 ETM trace unit resources implemented (continued) 





Description 


Configuration 





Reduced function counter implemented 


Not implemented 




















Number of sequencer states implemented 4 
Number of Virtual Machine ID comparators implemented | 1 
Number of Context ID comparators implemented 1 
Number of address comparator pairs implemented 4 
Number of single-shot comparator controls 1 
Number of core comparator inputs implemented 0 





Data address comparisons implemented 


Not implemented 











Number of data value comparators implemented 








0 
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C4 Embedded Trace Macrocell 
C4.3 ETM trace unit functional description 


C4.3 ETM trace unit functional description 
This section describes the functionality of the ETM trace unit. 


The following figure shows the main functional blocks of the ETM trace unit. 





ETM 





CORECLK——=p> 





Trace out <————ATB——_> 



















Filtering and triggering 


DebugAre resources 


















Core Core interface 


interface block Trace generation 


























Figure C4-1 ETM functional blocks 


Core interface 
This block monitors the behavior of the core and generates PO elements that are essentially 
executed branches and exceptions traced in program order. 


Trace generation 
The trace generation block generates various trace packets based on PO elements. 


Filtering and triggering resources 
You can limit the amount of trace data generated by the ETM through the process of filtering. 


For example, generating trace only in a certain address range. More complicated logic analyzer 
style filtering options are also available. 


The ETM trace unit can also generate a trigger that is a signal to the trace capture device to stop 
capturing trace. 





FIFO 
The trace generated by the ETM trace unit is in a highly-compressed form. 
The FIFO enables trace bursts to be flattened out. When the FIFO becomes full, the FIFO 
signals an overflow. The trace generation logic does not generate any new trace until the FIFO is 
emptied. This causes a gap in the trace when viewed in the debugger. 

Trace out 
Trace from FIFO is output on the AMBA ATB interface. 
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C4 Embedded Trace Macrocell 
C4.4 Resetting the ETM 


C4.4 Resetting the ETM 


The reset for the ETM trace unit is the same as a Cold reset for the core. 


The ETM trace unit is not reset when Warm reset is applied to the core so that tracing through Warm core 
reset is possible. 


If the ETM trace unit is reset, tracing stops until the ETM trace unit is reprogrammed and re-enabled. 
However, if the core is reset using Warm reset, the last few instructions provided by the core before the 
reset might not be traced. 
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C4 Embedded Trace Macrocell 


C4.5 Programming and reading ETM trace unit registers 


C4.5 Programming and reading ETM trace unit registers 


You program and read the ETM trace unit registers using the Debug APB interface. 


The core does not have to be in debug state when you program the ETM trace unit registers. 


When you are programming the ETM trace unit registers, you must enable all the changes at the same 
time. Otherwise, if you program the counter, it might start to count based on incorrect events before the 
correct setup is in place for the trigger condition. 


To disable the ETM trace unit, use the TRCPRGCTLR.EN bit. 


( Start ) 


v 
Set main enable bit in 
TRCPRGCTLR to 0b0 








v 





Read TRCSTATR 














No 






Is TRCSTATR Idle 
0b1? 


Yes 


yv 





Program all trace 
registers required 


v 
Set main enable bit in 
TRCPRGCTLR to 0b1 


beg $$ 
Vv 


Read TRCSTATR 

































Is TRCSTATR Idle 
Ob0? 


Yes 


End 


Figure C4-2 Programming ETM trace unit registers 
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C4 Embedded Trace Macrocell 
C4.6 ETM trace unit register interfaces 


C4.6 ETM trace unit register interfaces 
The Cortex-A76 core supports only memory-mapped interface to trace registers. 


See the Arm® Embedded Trace Macrocell Architecture Specification ETMyv4 for information on the 
behaviors on register accesses for different trace unit states and the different access mechanisms. 


Related references 
C1.4 External debug interface on page C1-372 
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C4 Embedded Trace Macrocell 
C4.7 Interaction with the PMU and Debug 


C4.7 Interaction with the PMU and Debug 
This section describes the interaction with the PMU and the effect of debug double lock on trace register 
access. 
Interaction with the PMU 


The Cortex-A76 core includes a PMU that enables events, such as cache misses and instructions 
executed, to be counted over a period of time. 


The PMU and ETM trace unit function together. 


Use of PMU events by the ETM trace unit 


The PMU architectural events described in C2.3 PMU events on page C2-376 are available to the ETM 
trace unit through the extended input facility. 


See the Arm® Architecture Reference Manual Armv&, for Armv8-A architecture profile for more 
information about PMU events. 


The ETM trace unit uses four extended external input selectors to access the PMU events. Each selector 
can independently select one of the PMU events, that are then active for the cycles where the relevant 
events occur. These selected events can then be accessed by any of the event registers within the ETM 
trace unit. The PMU event table describes the PMU events. 


Related references 
C2.3 PMU events on page C2-376 
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C4 Embedded Trace Macrocell 
C4.7 Interaction with the PMU and Debug 
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Part D 


Debug registers 


Chapter D1 
AArch32 debug registers 


This chapter describes the debug registers in the AArch32 Execution state and shows examples of how to 
use them. 


It contains the following section: 
¢ D1.1 AArch32 debug register summary on page D1-406. 
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D1.1 AArch32 debug register summary 


The following table summarizes the 32-bit and 64-bit debug control registers that are accessible in the 
AArch32 Execution state from the internal CP14 interface. These registers are accessed by the MCR and 
MRC instructions in the order of CRn, op2, CRm, Op! or MCRR and MRRC instructions in the order of CRm, 


Opl. 


D1 AArch32 debug registers 
D1.1 AArch32 debug register summary 


For those registers not described in this chapter, see the Arm® Architecture Reference Manual Arm*v8, for 
Arm®v8-A architecture profile. 


Table D1-1 AArch32 debug register summary 






































CRn | Op2|CRm | Op1 | Name Type | Reset Description 

c0 0 cl 0 DBGDSCRint |RO | 000xee00 Debug Status and Control Register, Internal View 

c0 0 c5 0 DBGDTRTXint | WO _ | - Debug Data Transfer Register, Transmit, Internal View 
c0 0 c5 0 DBGDTRRXint|RO | 0x@000008O | Debug Data Transfer Register, Receive, Internal View 
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Chapter D2 
AArch64 debug registers 


This chapter describes the debug registers in the AArch64 Execution state and shows examples of how to 
use them. 


It contains the following sections: 

¢ D2.1 AArch64 debug register summary on page D2-408. 

¢ D2.2 DBGBCRn_EL1, Debug Breakpoint Control Registers, ELI on page D2-410. 
¢ D2.3 DBGCLAIMSET ELI, Debug Claim Tag Set Register, ELI on page D2-413. 

¢ D2.4 DBGWCRn_ELI, Debug Watchpoint Control Registers, ELI on page D2-414. 
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D2 AArch64 debug registers 
D2.1 AArch64 debug register summary 







































































D2.1 AArch64 debug register summary 
These registers, listed in the following table, are accessed by the MRS and MSR instructions in the order of 
Op0, CRn, Op1, CRm, Op?2. 
See D3.1 Memory-mapped debug register summary on page D3-418 for a complete list of registers 
accessible from the external debug interface. The 64-bit registers cover two addresses on the external 
memory interface. For those registers not described in this chapter, see the Arm® Architecture Reference 
Manual Armv8, for Armv8-A architecture profile. 
Table D2-1 AArch64 debug register summary 
Name Type | Reset Width | Description 
OSDTRRX EL1 RW_ | 0x000008880 | 32 Debug Data Transfer Register, Receive, External View 
DBGBVRO_ EL1 RW |- 64 Debug Breakpoint Value Register 0 
DBGBCRO_EL1 RW |UNK 32 D2.2 DBGBCRn_EL1, Debug Breakpoint Control Registers, EL1 
on page D2-410 
DBGWVRO EL1 RW |- 64 Debug Watchpoint Value Register 0 
DBGWCRO_EL1 RW |UNK 32 D2.4 DBGWCRn_EL1, Debug Watchpoint Control Registers, EL1 
on page D2-414 
DBGBVRI EL1 RW |- 64 Debug Breakpoint Value Register 1 
DBGBCR1_ EL1 RW |UNK 32 D2.2 DBGBCRn_EL1, Debug Breakpoint Control Registers, EL1 
on page D2-410 
DBGWVRI1 EL1 RW |- 64 Debug Watchpoint Value Register 1 
DBGWCRI1 ELI RW |UNK 32 D2.4 DBGWCRn_EL1, Debug Watchpoint Control Registers, EL1 
on page D2-414 
MDCCINT _EL1 RW_ | 0x000008880 | 32 Monitor Debug Comms Channel Interrupt Enable Register 
MDSCR_EL1 RW |- 32 
DBGBVR2 _ EL1 RW |- 64 Debug Breakpoint Value Register 2 
DBGBCR2_EL1 RW | UNK 32 D2.2 DBGBCRn_EL1, Debug Breakpoint Control Registers, EL1 
on page D2-410 
DBGWVR2_ EL1 RW |- 64 Debug Watchpoint Value Register 2 
DBGWCR2 EL1 RW |UNK 32 D2.4 DBGWCRn_EL1, Debug Watchpoint Control Registers, EL1 
on page D2-414 
OSDTRTX_EL1 RW |- 32 Debug Data Transfer Register, Transmit, External View 
DBGBVR3_EL1 RW |- 64 Debug Breakpoint Value Register 3 
DBGBCR3_EL1 RW |UNK 32 D2.2 DBGBCRn_EL1, Debug Breakpoint Control Registers, EL1 
on page D2-410 
DBGWVR3_EL1 RW |- 64 Debug Watchpoint Value Register 3 
DBGWCR3_EL1 RW |UNK 32 D2.4 DBGWCRn_EL1, Debug Watchpoint Control Registers, EL1 
on page D2-414 
DBGBVR4 EL1 RW |- 64 Debug Breakpoint Value Register 4 
DBGBCR4 EL1 RW |UNK 32 D2.2 DBGBCRn_EL1, Debug Breakpoint Control Registers, EL1 
on page D2-410 
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D2 AArch64 debug registers 
D2.1 AArch64 debug register summary 


Table D2-1 AArch64 debug register summary (continued) 





















































Name Type | Reset Width | Description 

DBGBVRS5_ EL] RW |- 64 Debug Breakpoint Value Register 5 

DBGBCRS_EL1 RW |UNK 32 D2.2 DBGBCRn_EL1, Debug Breakpoint Control Registers, EL1 
on page D2-410 

OSECCR_EL1 RW_ | 0x000000080 | 32 Debug OS Lock Exception Catch Register 

MDCCSR_ELO RO_ | 0x00000880 | 32 Monitor Debug Comms Channel Status Register 

DBGDTR_ELO RW_ | 0x0000088080 | 64 Debug Data Transfer Register, half-duplex 

DBGDTRTX_ELO WO _ | 0x000000880 | 32 Debug Data Transfer Register, Transmit, Internal View 

DBGDTRRX_ELO RO | 0x000000880 | 32 Debug Data Transfer Register, Receive, Internal View 

MDRAR ELI RO |_ 64 Debug ROM Address Register. This register is reserved, RESO 

OSLAR_EL1 WO |- 32 Debug OS Lock Access Register 

OSLSR_EL1 RO _ | 0@x@@80G@OA | 32 Debug OS Lock Status Register 

OSDLR_EL1 RW_ | 0x0e8000080 | 32 Debug OS Double Lock Register 

DBGPRCR_EL1 RW |- 32 Debug Power/Reset Control Register 

DBGCLAIMSET EL1 RW_ | Ox@@GQOOFF | 32 D2.3 DBGCLAIMSET_EL1, Debug Claim Tag Set Register, EL1 
on page D2-413 

DBGCLAIMCLR EL1 RW_ | 0x000008880 | 32 Debug Claim Tag Clear Register 

DBGAUTHSTATUS EL1]RO_ | @x0Q@Q@Q@QAA | 32 Debug Authentication Status Register 
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D2 AArch64 debug registers 
D2.2 DBGBCRn_EL1, Debug Breakpoint Control Registers, EL1 


D2.2 DBGBCRn_EL1, Debug Breakpoint Control Registers, EL1 


The DBGBCRn_ELI holds control information for a breakpoint. Each DBGBVR_EL] is associated with 
a DBGBCR_ELI to form a Breakpoint Register Pair (BRP). DBGBVRn_ELI is associated with 
DBGBCRn_ ELI to form BRPn. The range of n for DBGBCRn_EL1 is 0 to 5. 

Bit field descriptions 


The DBGBCRn_ELI registers are 32-bit registers. 


31 24 23 20 19 16.15 14 13 12 5 43210 
RESO 


Figure D2-1 DBGBCRn_EL1 bit assignments 
RESO, [31:24] 


RESO Reserved. 


BT, [23:20] 


Breakpoint Type. This field controls the behavior of Breakpoint debug event generation. This 
includes the meaning of the value held in the associated DBGBVRn_EL1, indicating whether it 
is an instruction address match or mismatch, or a Context match. It also controls whether the 
breakpoint is linked to another breakpoint. The possible values are: 

@beeee Unlinked instruction address match. 

Q@bee0e1 
Qbe010 
@be0011 
Qbe160 
Qb0101 


Linked instruction address match. 
Unlinked Context ID match. 
Linked Context ID match. 
Unlinked instruction address mismatch. 
Linked instruction address mismatch. 
@be118 Unlinked CONTEXTIDR_EL1 match. 
@be111 Linked CONTEXTIDR_EL1 match. 
@b10e0 Unlinked VMID match. 
@b1001 Linked VMID match. 
@b101@ Unlinked VMID + Conext ID match. 
@b1011 Linked VMID + Context ID match. 
@b110@ Unlinked CONTEXTIDR_EL2 match. 
@b1101 Linked CONTEXTIDR_EL2 match. 
@b111@ Unlinked Full Context ID match. 
@b1111 Linked Full Context ID match. 





The field break down is: 
¢ BTT[3:1]: Base type. If the breakpoint is not context-aware, these bits are REso. Otherwise, the 
possible values are: 
@beee Match address. DBGBVRn_ EL] is the address of an instruction. 
@be@e1 Match context ID. DBGBVRn_EL1[31:0] is a context ID. 
@be1@ Match VMID. DBGBVRza_EL1[47:32] is a VMID. 
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D2 AArch64 debug registers 
D2.2 DBGBCRn_EL1, Debug Breakpoint Control Registers, EL1 


@b@11 Match VMID and CONTEXTIDR_EL1. DBGBVRn_EL1[31:0] is a context ID, 
and DBGBVRn»_EL1[47:32] is a VMID. 


¢ BT[2]: Mismatch. rEso. 
¢ BT[O0]: Enable linking. 


LBN, [19:16] 


Linked breakpoint number. For Linked address matching breakpoints, this specifies the index of 
the Context-matching breakpoint linked to. 


SSC, [15:14] 


Security State Control. Determines the Security states under which a Breakpoint debug event for 
breakpoint 7 is generated. 


This field must be interpreted with the Higher Mode Control (HMC), and Privileged Mode 
Control (PMC), fields to determine the mode and security states that can be tested. 


See the Arm® Architecture Reference Manual Armv8, for Armvs-A architecture profile for 
possible values of the HMC and PMC fields. 


HMC, [13] 


Hyp Mode Control bit. Determines the debug perspective for deciding when a breakpoint debug 
event for breakpoint n is generated. 


This bit must be interpreted with the SSC and PMC fields to determine the mode and security 
states that can be tested. 


See the Arm® Architecture Reference Manual Armv8, for Armv8s-A architecture profile for 
possible values of the SSC and PMC fields. 


RESO, [12:9] 


RESO Reserved. 


BAS, [8:5] 


Byte Address Select. Defines which half-words a regular breakpoint matches, regardless of the 
instruction set and execution state. A debugger must program this field as follows: 


@x3 Match the T32 instruction at DBGBVRn_EL1. 
@xC Match the T32 instruction at DBGBVRn+2_EL1. 
@xF Match the A64 or A32 instruction at DBGBVRn_ELI, or context match. 


All other values are reserved. 


The Armv8-A architecture does not support direct execution of Java bytecodes. BAS[3] and 
BAS[1] ignore writes and on reads return the values of BAS[2] and BAS[0] respectively. 


See the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile for more 
information on how the BAS field is interpreted by hardware. 


RESO, [4:3] 


RESO Reserved. 
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D2 AArch64 debug registers 
D2.2 DBGBCRn_EL1, Debug Breakpoint Control Registers, EL1 


PMG, [2:1] 


E, [0] 


Privileged Mode Control. Determines the Exception level or levels that a breakpoint debug 
event for breakpoint n is generated. 


This field must be interpreted with the SSC and HMC fields to determine the mode and security 
states that can be tested. 


See the Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile for 
possible values of the SSC and HMC fields. 


Bits[2:1] have no effect for accesses made in Hyp mode. 


Enable breakpoint. This bit enables the BRP: 

) BRP disabled. 

1 BRP enabled. 

A BRP never generates a breakpoint debug event when it is disabled. 


The value of DBGBCRn_EL1.E is UNKNowNn on reset. A debugger must ensure that 
DBGBCRn_EL1.E has a defined value before it enables debug. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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D2 AArch64 debug registers 
D2.3 DBGCLAIMSET_EL1, Debug Claim Tag Set Register, EL1 


D2.3 DBGCLAIMSET_EL1, Debug Claim Tag Set Register, EL1 
The DBGCLAIMSET_EL1 is used by software to set CLAIM bits to 1. 


Bit field descriptions 
The DBGCLAIMSET_ ELI is a 32-bit register. 


31 8 7 0 


RESO 


Figure D2-2 DBGCLAIMSET_EL1 bit assignments 
RESO, [31:8] 
RESO Reserved. 
CLAIM, [7:0] 
Claim set bits. 


Writing a | to one of these bits sets the corresponding CLAIM bit to 1. This is an indirect write 
to the CLAIM bits. 


A single write operation can set multiple bits to 1. Writing 0 to one of these bits has no effect. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 
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D2 AArch64 debug registers 
D2.4 DBGWCRn_EL1, Debug Watchpoint Control Registers, EL1 


D2.4 DBGWCRn_EL1, Debug Watchpoint Control Registers, EL1 


The DBGWCRn_ELI holds control information for a watchpoint. Each DBGWCR_ELI is associated 
with a DBGWVR_ELI to form a Watchpoint Register Pair (WRP). DBGWCRn_ EL! is associated with 
DBGWVRn ELI to form WRPn. The range of 1 for DBGBCRn_ EL! is 0 to 3. 

Bit field descriptions 


The DBGWCRn_ELI registers are 32-bit registers. 


29 28 2423 212019 16 15 14 13 12 543210 
L_wt L_HMC 
RESO 


Figure D2-3 DBGWCRn_EL1 bit assignments 
RESO, [31:29] 


RESO Reserved. 


MASK, [28:24] 
Address mask. Only objects up to 2GB can be watched using a single mask. 


eeeee@ No mask. 
90001 Reserved. 
90010 Reserved. 
Other values mask the corresponding number of address bits, from @b@0011 masking 3 address 


bits (@x@@000007 mask for address) to @b11111 masking 31 address bits (@x7FFFFFFF mask for 
address). 


RESO, [23:21] 


RESO Reserved. 


WT, [20] 
Watchpoint type. Possible values are: 
() Unlinked data address match. 
1 Linked data address match. 


On Cold reset, the field reset value is architecturally UNKNOWN. 
LBN, [19:16] 


Linked breakpoint number. For Linked data address watchpoints, this specifies the index of the 
Context-matching breakpoint linked to. 


On Cold reset, the field reset value is architecturally UNKNOWN. 
SSC, [15:14] 


Security state control. Determines the Security states under which a watchpoint debug event for 
watchpoint n is generated. This field must be interpreted along with the HMC and PAC fields. 


On Cold reset, the field reset value is architecturally UNKNOWN. 
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D2 AArch64 debug registers 
D2.4 DBGWCRn_EL1, Debug Watchpoint Control Registers, EL1 


HMC, [13] 


Higher mode control. Determines the debug perspective for deciding when a watchpoint debug 
event for watchpoint n is generated. This field must be interpreted along with the SSC and PAC 
fields. 


On Cold reset, the field reset value is architecturally UNKNOWN. 
BAS, [12:5] 


Byte address select. Each bit of this field selects whether a byte from within the word or double- 
word addressed by DBGWVRn_ ELI is being watched. See the Arm® Architecture Reference 
Manual Armv8, for Armv8-A architecture profile for more information. 


LSC, [4:3] 


Load/store access control. This field enables watchpoint matching on the type of access being 
made. The possible values are: 


e1 Match instructions that load from a watchpoint address. 
10 Match instructions that store to a watchpoint address. 
11 Match instructions that load from or store to a watchpoint address. 


All other values are reserved, but must behave as if the watchpoint is disabled. Software must 
not rely on this property because the behavior of reserved values might change in a future 
revision of the architecture. 


IGNORED if E is 0. 
On Cold reset, the field reset value is architecturally UNKNOWN. 
PAG, [2:1] 


Privilege of access control. Determines the Exception level or levels at which a watchpoint 
debug event for watchpoint n is generated. This field must be interpreted along with the SSC 
and HMCfields. 


On Cold reset, the field reset value is architecturally UNKNOWN. 


E, [0] 
Enable watchpoint n. Possible values are: 
() Watchpoint disabled. 
1 Watchpoint enabled. 


On Cold reset, the field reset value is architecturally UNKNOWN. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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D2 AArch64 debug registers 
D2.4 DBGWCRn_EL1, Debug Watchpoint Control Registers, EL1 
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Chapter D3 
Memory-mapped debug registers 


This chapter describes the memory-mapped debug registers and shows examples of how to use them. 


It contains the following sections: 

¢« D3.1 Memory-mapped debug register summary on page D3-418. 

¢ D3.2 EDCIDRO, External Debug Component Identification Register 0 on page D3-422. 
¢ D3.3 EDCIDR1, External Debug Component Identification Register 1 on page D3-423. 
¢ D3.4 EDCIDR2, External Debug Component Identification Register 2 on page D3-424. 
¢ D3.5 EDCIDR3, External Debug Component Identification Register 3 on page D3-425. 
¢ D3.6 EDDEVID, External Debug Device ID Register 0 on page D3-426. 

¢ D3.7 EDDEVID1, External Debug Device ID Register 1 on page D3-427. 

¢ D3.8 EDPIDRO, External Debug Peripheral Identification Register 0 on page D3-428. 
¢ D3.9 EDPIDRI, External Debug Peripheral Identification Register 1 on page D3-429. 
¢ D3.10 EDPIDR2, External Debug Peripheral Identification Register 2 on page D3-430. 
¢ D3.11 EDPIDR3, External Debug Peripheral Identification Register 3 on page D3-431. 
¢ D3.12 EDPIDR4, External Debug Peripheral Identification Register 4 on page D3-432. 
¢ D3.13 EDPIDRn, External Debug Peripheral Identification Registers 5-7 on page D3-433. 
¢ D3.14 EDRCR, External Debug Reserve Control Register on page D3-434. 
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D3 Memory-mapped debug registers 
D3.1 Memory-mapped debug register summary 

























































































D3.1 Memory-mapped debug register summary 
The following table shows the offset address for the registers that are accessible from the external debug 
interface. 
For those registers not described in this chapter, see the Arm® Architecture Reference Manual Armv8, for 
Armv8s-A architecture profile. 
Table D3-1 Memory-mapped debug register summary 
Offset Name Type | Width | Description 
@x@00-Ox@1C | - - - Reserved 
0x20 EDESR RW | 32 External Debug Event Status Register 
@x0@24 EDECR RW | 32 External Debug Execution Control Register 
@x028-OxO2C | - - - Reserved 
0x030 EDWAR[31:0] RO | 64 External Debug Watchpoint Address Register 
@x034 EDWAR[63:32] 
@x038-Ox@7C | - - - Reserved 
0x080 DBGDTRRX_ELO RW | 32 Debug Data Transfer Register, Receive 
0x084 EDITR WO | 32 External Debug Instruction Transfer Register 
8x088 EDSCR RW | 32 External Debug Status and Control Register 
@x@8C DBGDTRTX_ELO WO |32 Debug Data Transfer Register, Transmit 
Q@x890 EDRCR WO | 32 D3.14 EDRCR, External Debug Reserve Control Register 
on page D3-434 
@x094 - RW | 32 Reserved 
Qx098 EDECCR RW | 32 External Debug Exception Catch Control Register 
@xe@9C - - - Reserved 
@x0AQ - - - Reserved 
@x0A4 - - - Reserved 
@x@A8 - - - Reserved 
@x@AC - : - Reserved 
@x@BO-Ox2FC | - - - Reserved 
@x300 OSLAR_EL1 WO |32 OS Lock Access Register 
@x304-Ox3@C | - - - Reserved 
0x310 EDPRCR RW | 32 External Debug Power/Reset Control Register 
@x314 EDPRSR RO | 32 External Debug Processor Status Register 
@x318-Ox3FC | - - - Reserved 
0x400 DBGBVRO_EL1[31:0] RW | 64 Debug Breakpoint Value Register 0 
@x404 DBGBVRO_EL1[63:32] 
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D3 Memory-mapped debug registers 
D3.1 Memory-mapped debug register summary 


Table D3-1 Memory-mapped debug register summary (continued) 































































































Offset Name Type | Width | Description 

0x408 DBGBCRO_EL1 RW | 32 D2.2 DBGBCRn_EL1, Debug Breakpoint Control Registers, EL1 
on page D2-410 

@x40C - - - Reserved 

0x410 DBGBVRI EL1[31:0] RW | 64 Debug Breakpoint Value Register 1 

@x414 DBGBVR1_EL1[63:32] 

0x418 DBGBCR1 EL1 RW | 32 D2.2 DBGBCRn_EL1, Debug Breakpoint Control Registers, EL1 
on page D2-410 

@x41C - - - Reserved 

@x420 DBGBVR2_ EL1[31:0] RW | 64 Debug Breakpoint Value Register 2 

@x424 DBGBVR2_EL1[63:32] 

@x428 DBGBCR2_EL1 RW | 32 D2.2 DBGBCRn_EL1, Debug Breakpoint Control Registers, EL1 
on page D2-410 

@x42C - - - Reserved 

0x430 DBGBVR3_EL1[31:0] RW | 64 Debug Breakpoint Value Register 3 

@x434 DBGBVR3_EL1[63:32] 

0x438 DBGBCR3 EL1 RW | 32 D2.2 DBGBCRn_EL1, Debug Breakpoint Control Registers, EL1 
on page D2-410 

@x43C - - - Reserved 

0x440 DBGBVR4 EL1[31:0] RW | 64 Debug Breakpoint Value Register 4 

@x444 DBGBVR4 _EL1[63:32] 

0x448 DBGBCR4 EL1 RW | 32 D2.2 DBGBCRn_EL1, Debug Breakpoint Control Registers, EL1 
on page D2-410 

@x44C - - - Reserved 

@x450 DBGBVRS_EL1[31:0] RW | 64 Debug Breakpoint Value Register 5 

@x454 DBGBVRS_EL1[63:32] 

@x458 DBGBCRS EL1 RW | 32 D2.2 DBGBCRn_EL1, Debug Breakpoint Control Registers, EL1 
on page D2-410 

@x45C-Ox7FC | - - - Reserved 

Qx800 DBGWVRO_ EL1[31:0] RW_ | 64 Debug Watchpoint Value Register 0 

@x804 DBGWVRO_EL1[63:32] 

0x88 DBGWCRO_EL1 RW | 32 D2.4 DBGWCRn_EL1, Debug Watchpoint Control Registers, EL1 
on page D2-414 

@x80C - - - Reserved 

0x810 DBGWVRI_ EL1[31:0] RW | 64 Debug Watchpoint Value Register 1 

@x814 DBGWVRI1_EL1[63:32] 

0x818 DBGWCRI1 ELI RW | 32 D2.4 DBGWCRn_EL1, Debug Watchpoint Control Registers, EL1 











on page D2-414 
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D3 Memory-mapped debug registers 
D3.1 Memory-mapped debug register summary 


Table D3-1 Memory-mapped debug register summary (continued) 





































































































Offset Name Type | Width | Description 
@x81C - - - Reserved 
Qx820 DBGWVR2_EL1[31:0] RW | 64 Debug Watchpoint Value Register 2 
@x824 DBGWVR2_EL1[63:32] 
Qx828 DBGWCR2_EL1 RW | 32 D2.4 DBGWCRn_EL1, Debug Watchpoint Control Registers, EL1 
on page D2-414 
@x82C - - - Reserved 
0x830 DBGWVR3_EL1[31:0] RW | 64 Debug Watchpoint Value Register 0, 
@x834 DBGWVR3_EL1[63:32] 
0x838 DBGWCR3 ELI RW | 32 D2.4 DBGWCRn_EL1, Debug Watchpoint Control Registers, EL1 
on page D2-414 
@x83C-OxCFC | - - - Reserved 
@xDee MIDR RO |32 B2.85 MIDR_ELI, Main ID Register, EL1 on page B2-268 
@xD@4-@xD1C | - - - Reserved 
@xD20 EDPFR[31:0] RO | 64 B2.62 ID_AA64PFRO_EL1, AArch64 Processor Feature Register 0, ELI 
exD24 EDPFR[63:32] sit a ial 
@xD28 EDDFR{[31:0] RO | 64 B2.62 ID_AA64PFRO_EL1, AArch64 Processor Feature Register 0, EL1 
@xD2C EDDFR[63:32] cd 
@xD60-OxEFC | - - - Reserved 
@xFee - - - Reserved 
@xF@4-OxF9C | - - - Reserved 
OxFA@ DBGCLAIMSET_ EL1 RW | 32 D2.3 DBGCLAIMSET ELI, Debug Claim Tag Set Register, EL1 
on page D2-413 
@xFA4 DBGCLAIMCLR EL1 RW | 32 Debug Claim Tag Clear Register 
@xFA8 EDDEVAFFO RO | 32 External Debug Device Affinity Register 0 
@xFAC EDDEVAFFI1 RO | 32 External Debug Device Affinity Register 1 
@xFB@ : 7 - Reserved 
@xFB4 - - - Reserved 
OxFB8 DBGAUTHSTATUS ELI |RO = | 32 Debug Authentication Status Register 
@xFBC EDDEVARCH RO | 32 External Debug Device Architecture Register 
@xFCO EDDEVID2 RO |32 External Debug Device ID Register 2, RESO 
@xFC4 EDDEVID1 RO | 32 D3.7 EDDEVID1, External Debug Device ID Register 1 on page D3-427 
@xFC8 EDDEVID RO | 32 D3.6 EDDEVID, External Debug Device ID Register 0 on page D3-426 
@xFCC EDDEVTYPE RO | 32 External Debug Device Type Register 
@xFDO EDPIDR4 RO | 32 D3.12 EDPIDR4, External Debug Peripheral Identification Register 4 
on page D3-432 
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D3 Memory-mapped debug registers 
D3.1 Memory-mapped debug register summary 


Table D3-1 Memory-mapped debug register summary (continued) 





Offset Name Type | Width | Description 





@xFD4-@xFDC | EDPIDRS-7 RO |32 D3.13 EDPIDRn, External Debug Peripheral Identification Registers 
5-7 on page D3-433 





OxFEO EDPIDRO RO |32 D3.8 EDPIDRO, External Debug Peripheral Identification Register 0 
on page D3-428 





@xFE4 EDPIDR1 RO |32 D3.9 EDPIDR1, External Debug Peripheral Identification Register 1 
on page D3-429 





OxFE8 EDPIDR2 RO | 32 D3.10 EDPIDR2, External Debug Peripheral Identification Register 2 
on page D3-430 





@xFEC EDPIDR3 RO | 32 D3.11 EDPIDR3, External Debug Peripheral Identification Register 3 
on page D3-431 





OxFFO EDCIDRO RO | 32 D3.2 EDCIDRO, External Debug Component Identification Register 0 
on page D3-422 





OxFF4 EDCIDR1 RO | 32 D3.3 EDCIDRI, External Debug Component Identification Register 1 
on page D3-423 





OxFF8 EDCIDR2 RO | 32 D3.4 EDCIDR2, External Debug Component Identification Register 2 
on page D3-424 





@xFFC EDCIDR3 RO | 32 D3.5 EDCIDR3, External Debug Component Identification Register 3 
on page D3-425 
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D3 Memory-mapped debug registers 
D3.2 EDCIDRO, External Debug Component Identification Register 0 


D3.2 EDCIDRO, External Debug Component Identification Register 0 
The EDCIDRO provides information to identify an external debug component. 


Bit field descriptions 
The EDCIDR0O is a 32-bit register. 


31 8 7 0 


RESO 


Figure D3-1 EDCIDRO bit assignments 
RESO, [31:8] 
RESO Reserved. 
PRMBL_ 0, [7:0] 
@x@D Preamble byte 0. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé6, for Armv8-A architecture profile. 


The EDCIDRO can be accessed through the external debug interface, offset @xFF@. 
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D3 Memory-mapped debug registers 
D3.3 EDCIDR1, External Debug Component Identification Register 1 


D3.3 EDCIDR1, External Debug Component Identification Register 1 


The EDCIDR1 provides information to identify an external debug component. 


Bit field descriptions 
The EDCIDR1 is a 32-bit register. 


31 8 7 4 3 0 
RESO 


Figure D3-2 EDCIDR1 bit assignments 
RESO, [31:8] 
RESO Reserved. 
CLASS, [7:4] 
@x9 Debug component. 
PRMBL._1, [3:0] 
@xe Preamble. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The EDCIDRI can be accessed through the external debug interface, offset @xFF4. 
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D3 Memory-mapped debug registers 
D3.4 EDCIDR2, External Debug Component Identification Register 2 


D3.4 EDCIDR2, External Debug Component Identification Register 2 
The EDCIDR2 provides information to identify an external debug component. 


Bit field descriptions 
The EDCIDR2 is a 32-bit register. 


31 8 7 0 


RESO 


Figure D3-3 EDCIDR2 bit assignments 
RESO, [31:8] 
RESO Reserved. 
PRMBL 2, [7:0] 
@x@5 = Preamble byte 2. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The EDCIDR2 can be accessed through the external debug interface, offset @xFF8. 
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D3 Memory-mapped debug registers 
D3.5 EDCIDR3, External Debug Component Identification Register 3 


D3.5 EDCIDR3, External Debug Component Identification Register 3 
The EDCIDR3 provides information to identify an external debug component. 


Bit field descriptions 
The EDCIDR3 is a 32-bit register. 


31 8 7 0 


RESO 


Figure D3-4 EDCIDR3 bit assignments 
RESO, [31:8] 
RESO Reserved. 
PRMBL_ 3, [7:0] 
@xB1 Preamble byte 3. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé6, for Armv8-A architecture profile. 


The EDCIDR3 can be accessed through the external debug interface, offset @xFFC. 
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D3 Memory-mapped debug registers 
D3.6 EDDEVID, External Debug Device ID Register 0 


D3.6 EDDEVID, External Debug Device ID Register 0 


The EDDEVID provides extra information for external debuggers about features of the debug 
implementation. 


Bit field descriptions 
The EDDEVID is a 32-bit register. 


31 28 27 24 23 0 
Pomp 
RESO 


Figure D3-5 EDDEVID bit assignments 
RESO, [31:28] 
RESO Reserved. 
AuxRegs, [27:24] 
Indicates support for Auxiliary registers: 
@xe None supported. 
RESO, [23:0] 


RESO Reserved. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The EDDEVID can be accessed through the external debug interface, offset @xFCs8. 
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D3 Memory-mapped debug registers 
D3.7 EDDEVID1, External Debug Device ID Register 1 


D3.7 EDDEVID1, External Debug Device ID Register 1 


The EDDEVID1 provides extra information for external debuggers about features of the debug 
implementation. 


Bit field descriptions 
The EDDEVID1 is a 32-bit register. 


31 0 


SSS EE ES SS 


RESO 


Figure D3-6 EDDEVID1 bit assignments 
RESO, [31:0] 


RESO Reserved. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé8, for Armv8-A architecture profile. 


The EDDEVID1 can be accessed through the external debug interface, offset @xFC4. 
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D3 Memory-mapped debug registers 
D3.8 EDPIDRO, External Debug Peripheral Identification Register 0 


D3.8 EDPIDRO, External Debug Peripheral Identification Register 0 
The EDPIDRO provides information to identify an external debug component. 


Bit field descriptions 
The EDPIDRO is a 32-bit register. 


31 8 7 0 


a 


RESO 


Figure D3-7 EDPIDRO bit assignments 
RESO, [31:8] 
RESO Reserved. 
Part_0, [7:0] 
@x@B Least significant byte of the debug part number. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The EDPIDRO can be accessed through the external debug interface, offset @xFE@. 
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D3 Memory-mapped debug registers 
D3.9 EDPIDR1, External Debug Peripheral Identification Register 1 


D3.9 EDPIDR1, External Debug Peripheral Identification Register 1 
The EDPIDR1 provides information to identify an external debug component. 


Bit field descriptions 
The EDPIDR1 is a 32-bit register. 


31 8 7 4 3 0 


RESO 


Figure D3-8 EDPIDR1 bit assignments 
RESO, [31:8] 
RESO Reserved. 
DES_0, [7:4] 
@xB Arm Limited. This is the least significant nibble of JEP106 ID code. 
Part_1, [3:0] 
@xD Most significant nibble of the debug part number. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The EDPIDRI can be accessed through the external debug interface, offset @xFE4. 
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D3 Memory-mapped debug registers 
D3.10 EDPIDR2, External Debug Peripheral Identification Register 2 


D3.10 EDPIDR2, External Debug Peripheral Identification Register 2 


The EDPIDR2 provides information to identify an external debug component. 


Bit field descriptions 
The EDPIDR2 is a 32-bit register. 


31 8 7 432 0 
JEDEC —! 
RESO 


Figure D3-9 EDPIDR2 bit assignments 

RESO, [31:8] 

RESO Reserved. 
Revision, [7:4] 

0 r0pl. 
JEDEC, [3] 

@b1 RAO. Indicates a JEP 106 identity code is used. 
DES 1, [2:0] 

@be11 Arm Limited. This is the most significant nibble of JEP106 ID code. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé, for Armv8-A architecture profile. 


The EDPIDR2 can be accessed through the external debug interface, offset @xFE8. 
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D3 Memory-mapped debug registers 
D3.11 EDPIDR3, External Debug Peripheral Identification Register 3 


D3.11 EDPIDR3, External Debug Peripheral Identification Register 3 


The EDPIDR3 provides information to identify an external debug component. 


Bit field descriptions 
The EDPIDR3 is a 32-bit register. 


31 8 7 4 3 0 
RESO 


Figure D3-10 EDPIDR3 bit assignments 
RESO, [31:8] 


RESO Reserved. 


REVAND, [7:4] 


@xe Part minor revision. 
CMOD, [3:0] 
@xe Customer modified. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé6, for Armv8-A architecture profile. 


The EDPIDR3 can be accessed through the external debug interface, offset @xFEC. 
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D3 Memory-mapped debug registers 
D3.12 EDPIDR4, External Debug Peripheral Identification Register 4 


D3.12 EDPIDR4, External Debug Peripheral Identification Register 4 
The EDPIDR4 provides information to identify an external debug component. 


Bit field descriptions 
The EDPIDR4 is a 32-bit register. 


31 8 7 4 3 0 


RESO 


Figure D3-11 EDPIDR4 bit assignments 
RESO, [31:8] 
RESO Reserved. 
SIZE, [7:4] 


exe Size of the component. Log, the number of 4KB pages from the start of the 
component to the end of the component ID registers. 


DES 2, [3:0] 
@x4 Arm Limited This is the least significant nibble JEP106 continuation code. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The EDPIDR4 can be accessed through the external debug interface, offset @xFD@. 
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D3 Memory-mapped debug registers 
D3.13 EDPIDRn, External Debug Peripheral Identification Registers 5-7 


D3.13  EDPIDRn, External Debug Peripheral Identification Registers 5-7 
No information is held in the Peripheral ID5, Peripheral ID6, and Peripheral ID7 Registers. 


They are reserved for future use and are RESO. 
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D3 Memory-mapped debug registers 
D3.14 EDRCR, External Debug Reserve Control Register 


D3.14 EDRCR, External Debug Reserve Control Register 
The EDRCR is part of the Debug registers functional group. 


Bit field descriptions 


31 30 29 28 27 26 25 24 23 22 21 2019181716 1514131211109 876543210 
CSPA— 
RESO CSE 


Figure D3-12 EDRCR bit assignments 
RESO, [31:4] 
RESO Reserved. 
CSPA, [3] 


Clear Sticky Pipeline Advance. This bit is used to clear the EDSCR.PipeAdv bit to 0. The 
actions on writing to this bit are: 


7) No action. 
1 Clear the EDSCR.PipeAdv bit to 0. 
CSE, [2] 


Clear Sticky Error. Used to clear the EDSCR cumulative error bits to 0. The actions on writing 
to this bit are: 


(7) No action 


1 Clear the EDSCR. {TXU, RXO, ERR} bits, and, if the core is in Debug state, the 
EDSCR.ITO bit, to 0. 


RESO, [1:0] 
RESO Reserved. 


The EDRCR can be accessed through the internal memory-mapped interface and the external debug 
interface, offset @x@90. 


Usage constraints 


This register is accessible as follows: 





Off |DLK | OSLK | SLK | Default 




















Error | Error] Error | WI |WO 





Configurations 


EDRCR is in the Core power domain. 
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Chapter D4 
AArch32 PMU registers 


This chapter describes the AArch32 PMU registers and shows examples of how to use them. 


It contains the following sections: 

¢ D4.1 AArch32 PMU register summary on page D4-436. 

¢ D4.2 PMCEIDO, Performance Monitors Common Event Identification Register 0 on page D4-438. 
¢ D4.3 PMCEID1, Performance Monitors Common Event Identification Register I on page D4-441. 
¢« D4.4 PMCR, Performance Monitors Control Register on page D4-443. 
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D4 AArch32 PMU registers 
D4.1 AArch32 PMU register summary 

























































































D4.1 AArch32 PMU register summary 
The PMU counters and their associated control registers are accessible in the AArch32 Execution state 
from the internal CP15 system register interface with MCR and MRC instructions for 32-bit registers and 
MCRR and MRRC for 64-bit registers. 
The following table gives a summary of the Cortex-A76 PMU registers in the AArch32 Execution state. 
For those registers not described in this chapter, see the Arm® Architecture Reference Manual Armv8, for 
Armv8-A architecture profile. 
Table D4-1 PMU register summary in the AArch32 Execution state 
CRn | Op1 | CRm | Op2 | Name Type | Width | Reset Description 
c9 0 cl2 |0 PMCR RW | 32 @x410B30xx | D4.4 PMCR, Performance Monitors Control Register 
on page D4-443 
co 0 cl2 | 1 PMCNTENSET |RW | 32 @x008000@8 | Performance Monitors Count Enable Set Register 
c9 0 e122 PMCNTENCLR /RW_ | 32 @x800080@8 | Performance Monitors Count Enable Clear Register 
c9 0 cl2) |3 PMOVSR RW |32 @xeeeeeeee | Performance Monitors Overflow Flag Status Register 
c9 0 cl2 |4 PMSWINC WO | 32 UNK Performance Monitors Software Increment Register 
c9 0 cl2 |5 PMSELR RW | 32 UNK Performance Monitors Event Counter Selection 
Register 
c9 0 cl2 |6 PMCEIDO RO | 32 Ox7FFFOF3F | D5.2 PMCEIDO_ELO, Performance Monitors Common 
Event Identification Register 0, ELO on page D5-450 
c9 0 cl2 |7 PMCEID1 RO | 32 @x@@G@@BE7E | D5.3 PMCEID1_ELO, Performance Monitors Common 
Event Identification Register 1, ELO on page D5-453 
c9 0 cl4 | 4 PMCEID2 RO | 32 @x@0000G@0 | Reserved 
c9 0 cl4 [5 PMCEID3 RO |32 @x@00200@8 | Reserved 
c9 0 cl3 |0 PMCCNTR[31:0]) RW | 32 UNK Performance Monitors Cycle Count Register 
c9 3 cl3 | 0 PMCCNTR[63:0] |RW_ | 64 UNK 
c9 0 c13 1 PMXEVTYPER |RW_ |32 UNK Performance Monitors Selected Event Type Register 
c9 0 cl3 | 2 PMXEVCNTR RW | 32 UNK Performance Monitors Selected Event Count Register 
co | 0 cl4 0 PMUSERENR RW | 32 UNK Performance Monitors User Enable Register 
c9 0 cl4 |3 PMOVSSET RW |32 @xeeeeeeee | Performance Monitor Overflow Flag Status Set 
Register 
cl4 |0 c8 0 PMEVCNTRO RW | 32 UNK Performance Monitor Event Count Registers 
cl4 |0 c8 1 PMEVCNTRI RW | 32 UNK 
cl4 |0 c8 2 PMEVCNTR2 RW | 32 UNK 
cl4 |0 c8 3 PMEVCNTR3 RW | 32 UNK 
cl4 |0 c8 4 PMEVCNTR4 RW | 32 UNK 
cl4 |0 c8 5 PMEVCNTRS5 RW | 32 UNK 
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D4 AArch32 PMU registers 
D4.1 AArch32 PMU register summary 


Table D4-1 PMU register summary in the AArch32 Execution state (continued) 





























CRn | Op1 | CRm | Op2 | Name Type | Width | Reset Description 

cl4 |0 cl2 /0 PMEVTYPERO |RW | 32 UNK Performance Monitors Event Type Registers 

cl4 |0 cl2 |1 PMEVTYPERI |RW_ | 32 UNK 

cl4 |0 cl2 |2 PMEVTYPER2 |RW_ | 32 UNK 

cl4 |0 cl2 13 PMEVTYPER3 |RW_ | 32 UNK 

cl4 |0 cl2 |4 PMEVTYPER4 |RW_ | 32 UNK 

cl4 |0 cl2 15 PMEVTYPERS |RW_ | 32 UNK 

cl4 |0 clS )7 PMCCFILTR RW | 32 UNK Performance Monitors Cycle Count Filter Register 
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D4 AArch32 PMU registers 
D4.2 PMCEIDO, Performance Monitors Common Event Identification Register 0 


D4.2 PMCEIDO, Performance Monitors Common Event Identification Register 0 


The PMCEID0 defines which common architectural and common microarchitectural feature events are 


implemented. 


Bit field descriptions 


31 30 29 28 27 26 25 24 23 22 21 201918 17161514131211109 8 76543210 


ID[31:0], [31:0] 


Figure D4-1 PMCEIDO bit assignments 


Common architectural and microarchitectural feature events that can be counted by the PMU 
event counters. 


The following table shows the PMCEID0 bit assignments with event implemented or not 
implemented when the associated bit is set to 1 or 0. See the Arm® Architecture Reference 
Manual Armv8s, for Armv8-A architecture profile for more information about these events. 


Table D4-2 PMU events 





Bit | Event mnemonic 


Description 





[31] | LID_CACHE ALLOCATE 


L1 Data cache allocate: 


) This event is not implemented. 





[30] | CHAIN 


Chain. For odd-numbered counters, counts once for each overflow of the preceding even- 
numbered counter. For even-numbered counters, does not count: 





1 This event is implemented. 
[29] | BUS_CYCLES Bus cycle: 
1 This event is implemented. 





[28] | TTBR_WRITE RETIRED 


TTBR write, architecturally executed, condition check pass - write to translation table base: 


1 This event is implemented. 





[27] | INST_SPEC 


Instruction speculatively executed: 


1 This event is implemented. 





[26] | MEMORY_ERROR 


Local memory error: 





1 This event is implemented. 
[25] ] BUS_ACCESS Bus access: 
1 This event is implemented. 








[24] | L2D_CACHE_WB 








L2 Data cache Write-Back: 











1 This event is implemented. 
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D4 AArch32 PMU registers 
D4.2 PMCEIDO, Performance Monitors Common Event Identification Register 0 


Table D4-2 PMU events (continued) 


















































Bit | Event mnemonic Description 
[23] ) L2D_CACHE_REFILL L2 Data cache refill: 
1 This event is implemented. 
[22] | L2D_CACHE L2 Data cache access: 
1 This event is implemented. 
[21] | LID_CACHE_WB L1 Data cache Write-Back: 
1 This event is implemented. 
[20] | L1I_ CACHE L1 Instruction cache access: 
1 This event is implemented. 
[19] | MEM_ACCESS Data memory access: 
1 This event is implemented. 
[18] )] BR_PRED Predictable branch speculatively executed: 
1 This event is implemented. 
[17] | CPU_CYCLES Cycle: 
1 This event is implemented. 
[16] | BR_MIS_PRED Mispredicted or not predicted branch speculatively executed: 
1 This event is implemented. 
[15] |} UNALIGNED_LDST_RETIRED } Ipstruction architecturally executed, condition check pass - unaligned load or store: 
i) This event is not implemented. 
[14] ] BR_LRETURN_RETIRED Instruction architecturally executed, condition check pass - procedure retum: 
) This event is not implemented. 
[13] ] BR_IMMED_RETIRED Instruction architecturally executed - immediate branch: 
) This event is not implemented. 
[12] ) PC_WRITE_RETIRED Instruction architecturally executed, condition check pass - software change of the PC: 
) This event is not implemented. 
[11] | CID_WRITE_RETIRED Instruction architecturally executed, condition check pass - write to CONTEXTIDR: 
1 This event is implemented. 
[10] | EXC_RETURN Instruction architecturally executed, condition check pass - exception return: 








1 This event is implemented. 
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D4 AArch32 PMU registers 
D4.2 PMCEIDO, Performance Monitors Common Event Identification Register 0 


Table D4-2 PMU events (continued) 
























































Bit | Event mnemonic Description 
[9] | EXC_TAKEN Exception taken: 
1 This event is implemented. 
[8] | INST_RETIRED Instruction architecturally executed: 
1 This event is implemented. 
[7] | ST_RETIRED Instruction architecturally executed, condition check pass - store: 
7) This event is not implemented. 
[6] | LD_RETIRED Instruction architecturally executed, condition check pass - load: 
7) This event is not implemented. 
[5] | LID_TLB_REFILL LI Data TLB refill: 
1 This event is implemented. 
[4] | LID_CACHE L1 Data cache access: 
1 This event is implemented. 
[3] | LID_CACHE_REFILL L1 Data cache refill: 
1 This event is implemented. 
[2] | L1ITLB_REFILL L1 Instruction TLB refill: 
1 This event is implemented. 
[1] | LII_CACHE REFILL L1 Instruction cache refill: 
1 This event is implemented. 
[0] | SW_INCR Instruction architecturally executed, condition check pass - software increment: 
1 This event is implemented. 
Note 
The PMU events implemented in the above table can be found in Event number PMU event bus (to 
trace) Event mnemonic Event description 0x0 [00] SW_INCR Software increment. Instruction 
architecturally executed (condition code check pass). 0x1 [01] LII_CACHE_REFILL L1 instruction 
cache refill. This event counts any instruction fetch which misses in the cache. The ... on page C2-376. 
Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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D4 AArch32 PMU registers 
D4.3 PMCEID1, Performance Monitors Common Event Identification Register 1 





























D4.3 PMCEID1, Performance Monitors Common Event Identification Register 1 
The PMCEID1 defines which common architectural and common microarchitectural feature events are 
implemented. 

Bit field descriptions 
31 1615 0 
a ee 
RESO 
Figure D4-2 PMCEID1 bit assignments 
RESO, [31:16] 
RESO Reserved. 
ID[47:32], [15:0] 
Common architectural and microarchitectural feature events that can be counted by the PMU 
event counters. 
For each bit described in the following table, the event is implemented if the bit is set to 1, or 
not implemented if the bit is set to 0. 
Table D4-3 PMU common events 
Bit | Event mnemonic Description 
[15] | L2D_TLB Attributable Level 2 data or unified TLB access. 
1 This event is implemented. 
{13] | L2D_TLB_ REFILL Attributable Level 2 data or unified TLB refill. 
1 This event is implemented. 
[6] |L11TLB Level | instruction TLB access. 
1 This event is implemented. 
[5] | L1D_TLB Level 1 data TLB access. 
1 This event is implemented. 
[4] | STALL_ BACKEND No operation issued due to backend. 
1 This event is implemented. 
[3] | STALL_FRONTEND No operation issued due to frontend. 
1 This event is implemented. 
[2] |BR_MIS PRED RETIRED | Instruction architecturally executed, mispredicted branch. 














1 This event is not implemented. 
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Table D4-3 PMU common events (continued) 








Bit | Event mnemonic Description 
{1] | BR_RETIRED Instruction architecturally executed, branch. 
1 This event is implemented. 








[0] | L2D_CACHE ALLOCATE | Level 2 data cache allocation without refill. 


1 This event is implemented. 














Note 
The PMU events implemented in the above table can be found in Event number PMU event bus (to 
trace) Event mnemonic Event description 0x0 [00] SW_INCR Software increment. Instruction 
architecturally executed (condition code check pass). 0x1 [01] LI1I_CACHE_REFILL L1 instruction 
cache refill. This event counts any instruction fetch which misses in the cache. The ... on page C2-376. 








Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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D4.4 PMCR, Performance Monitors Control Register 


The PMCR provides details of the Performance Monitors implementation, including the number of 
counters implemented, and configures and controls the counters. 


Bit field descriptions 


PMCR is a 32-bit register, and is part of the Performance Monitors registers functional group. 


24 23 1615 11 10 76543 2 1 0 





L pp 
Lc 


RESO 


Figure D4-3 PMCR bit assignments 

IMP, [31:24] 

Indicates the implementer code. The value is: 

@x41 ASCII character 'A' - implementer is Arm Limited. 
IDCODE, [23:16] 

Identification code. The value is: 

@x@B Cortex-A76 core. 
N, [15:11] 

Identifies the number of event counters implemented. 

@bee11@ The core implements six event counters. 
RESO, [10:7] 

RESO Reserved. 
LC, [6] 


Long cycle count enable. Determines which PMCCNTR bit generates an overflow recorded in 
PMOVSRJ[31]. The overflow event is generated on a 32-bit or 64-bit boundary. The possible 


values are: 

be Overflow event is generated on a 32-bit boundary, when an increment changes 
PMCCNTR[31] from 1| to 0. This is the reset value. 

@b1 Overflow event is generated on a 64-bit boundary, when an increment changes 


PMCCNTR[63] from 1 to 0. 


Arm deprecates use of PMCR.LC = @be. 





DP, [5] 
Disable cycle counter CCNT when event counting is prohibited. The possible values are: 
@be Cycle counter operates regardless of the non-invasive debug authentication 
settings. This is the reset value. 
@b1 Cycle counter is disabled if non-invasive debug is not permitted and enabled. 
X, [4] 
100798 _0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights D4-443 
reserved. 


Non-Confidential 


D, [3] 


C, [2] 


P, 1] 


E, [0] 


D4 AArch32 PMU registers 
D4.4 PMCR, Performance Monitors Control Register 


Export enable. This bit permits events to be exported to another debug device, such as a trace 
macrocell, over an event bus. The possible values are: 


@be Export of events is disabled. This is the reset value. 
@b1 Export of events is enabled. 
No events are exported when counting is prohibited. 


This field does not affect the generation of Performance Monitors overflow interrupt requests or 
signaling to a cross-trigger interface (CTI) that can be implemented as signals exported from the 
PE. 


When this register has an architecturally defined reset value, if this field is implemented as an 
RW field, it resets to 0. 


Clock divider. The possible values are: 


@be When enabled, counter CCNT counts every clock cycle. This is the reset value. 
@b1 When enabled, counter CCNT counts once every 64 clock cycles. 


Arm deprecates use of PMCR.D = @b1. 


Cycle counter reset. This bit is WO. The effects of writing to this bit are: 


@be No action. This is the reset value. 
@b1 Reset PMCCNTR to zero. 
This bit is always RAZ. 


Resetting PMCCNTR does not clear the PMCCNTR overflow bit to 0. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile for more information. 


Event counter reset. This bit is WO. The effects of writing to this bit are: 


@be No action. This is the reset value. 

@b1 Reset all event counters accessible in the current EL, not including PMCCNTR, to 
Zero. 

This bit is always RAZ. 


In Non-secure ELO and EL1, a write of 1 to this bit does not reset event counters that 
HDCR.HPMN or MDCR_EL2.HPMN reserves for EL2 use. 


In EL2 and EL3, a write of | to this bit resets all the event counters. 


Resetting the event counters does not clear any overflow bits to 0. 


Enable. The possible values are: 


be All counters that are accessible at Non-secure EL1, including PMCCNTR, are 
disabled. This is the reset value. 

@b1 When this register has an architecturally defined reset value, this field resets to 0. 

This bit is RW. 


This bit does not affect the operation of event counters that HDCR.HPMN or 
MDCR_EL2.HPMN reserves for EL2 use. 


When this register has an architecturally defined reset value, this field resets to 0. 
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Configurations 


AArch32 System register PMCR is architecturally mapped to AArch64 System register 
PMCR_ELO. See D5.4 PMCR_ELO, Performance Monitors Control Register, ELO 
on page D5-455. 


AArch32 System register PMCR bits [6:0] are architecturally mapped to External register 
PMCR_ELO[6:0]. 


There is one instance of this register that is used in both Secure and Non-secure states. 


This register is in the Warm reset domain. Some or all RW fields of this register have defined 
reset values. On a Warm or Cold reset these apply only if the PE resets into an Exception level 
that is using AArch32. Otherwise, on a Warm or Cold reset RW fields in this register reset to 
architecturally UNKNOWN values. 
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Chapter D5 
AArch64 PMU registers 


This chapter describes the AArch64 PMU registers and shows examples of how to use them. 


It contains the following sections: 


D5.1 AArch64 PMU register summary on page D5-448. 

D5.2 PMCEIDO_ELO0, Performance Monitors Common Event Identification Register 0, ELO 
on page D5-450. 

D5.3 PMCEID1_ELO, Performance Monitors Common Event Identification Register 1, ELO 
on page D5-453. 

D5.4 PMCR_ELO, Performance Monitors Control Register, ELO on page DS-455. 
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AArch64 PMU register summary 


D5 AArch64 PMU registers 


D5.1 AArch64 PMU register summary 


The PMU counters and their associated control registers are accessible in the AArch64 Execution state 
with MRS and MSR instructions. 


The following table gives a summary of the Cortex-A76 PMU registers in the AArch64 Execution state. 
For those registers not described in this chapter, see the Arm® Architecture Reference Manual Armv8, for 
Armv8-A architecture profile. 


Table D5-1 PMU register summary in the AArch64 Execution state 





Name 


Type 


Width 


Reset 


Description 





PMCR_ELO 


RW 


32 


Qx410B30XX 


D5.4 PMCR_ELO, 
Performance Monitors 
Control Register, ELO 
on page D5-455 





PMCNTENSET ELO 


RW 


32 


UNK 


Performance Monitors 
Count Enable Set 
Register 





PMCNTENCLR_ELO 


RW 


32 


UNK 


Performance Monitors 
Count Enable Clear 
Register 





PMOVSCLR_ELO 


RW 


32 


UNK 


Performance Monitors 
Overflow Flag Status 
Register 





PMSWINC ELO 


WO 


32 


UNK 


Performance Monitors 
Software Increment 
Register 





PMSELR_ ELO 


RW 


32 


UNK 


Performance Monitors 
Event Counter Selection 
Register 





PMCEIDO_ELO 


RO 


64 


OxF7FFOF3F 


D5.2 PMCEIDO_ELO, 
Performance Monitors 
Common Event 
Identification Register 0, 
ELO on page D5-450 





PMCEID1_ ELO 


RO 


64 


@x000OBE7F 


D5.3 PMCEID1_ELO, 
Performance Monitors 
Common Event 
Identification Register 1, 
ELO on page D5-453 





PMCCNTR_ELO 


RW 


64 


UNK 


Performance Monitors 
Cycle Count Register 





PMXEVTYPER ELO 








RW 


32 





UNK 








Performance Monitors 
Selected Event Type and 





Filter Register 
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D5.1 AArch64 PMU register summary 


Table D5-1 PMU register summary in the AArch64 Execution state (continued) 














































































































Name Type Width Reset Description 

PMCCFILTR_ELO RW 32 UNK Performance Monitors 
Cycle Count Filter 
Register 

PMXEVCNTR_ELO RW 32 UNK Performance Monitors 
Selected Event Count 
Register 

PMUSERENR_ELO RW 32 UNK Performance Monitors 
User Enable Register 

PMINTENSET ELI RW 32 UNK Performance Monitors 
Interrupt Enable Set 
Register 

PMINTENCLR_EL1 RW 32 UNK Performance Monitors 
Interrupt Enable Clear 
Register 

PMOVSSET_ELO RW 32 UNK Performance Monitors 
Overflow Flag Status Set 
Register 

PMEVCNTRO_ ELO RW 32 UNK Performance Monitors 

PMEVCNTRI1_ELO RW 32 UNK ENSUE QUDEESEI IES 

PMEVCNTR2_ELO RW 32 UNK 

PMEVCNTR3_ELO RW 32 UNK 

PMEVCNTR4 ELO RW 32 UNK 

PMEVCNTRS5_ ELO RW 32 UNK 

PMEVTYPERO ELO RW 32 UNK Performance Monitors 

PMEVTYPERI ELO |RW 32 UNK Event Type Registers 

PMEVTYPER2_ ELO RW 32 UNK 

PMEVTYPER3_ELO RW 32 UNK 

PMEVTYPER4 ELO RW 32 UNK 

PMEVTYPERS_ ELO RW 32 UNK 

PMCCFILTR_ELO RW 32 UNK Performance Monitors 
Cycle Count Filter 
Register 

Related references 
C2.3 PMU events on page C2-376 
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D5.2 PMCEIDO_ELO, Performance Monitors Common Event Identification Register 


0, ELO 


The PMCEIDO_ELO defines which common architectural and common microarchitectural feature events 


are implemented. 


Bit field descriptions 


31 30 29 28 27 26 25 24 23 22 21 201918 17161514131211109 8 76543210 


ID[31:0], [31:0] 


Figure D5-1 PMCEIDO_ELO bit assignments 


Common architectural and microarchitectural feature events that can be counted by the PMU 
event counters. 


For each bit described in the following table, the event is implemented if the bit is set to 1, or 
not implemented if the bit is set to 0. 


Table D5-2 PMU common events 





Bit | Event mnemonic 


Description 





[31] | LID_CACHE ALLOCATE 


L1 Data cache allocate: 


() This event is not implemented. 





[30] | CHAIN 


Chain. For odd-numbered counters, counts once for each overflow of the preceding even- 
numbered counter. For even-numbered counters, does not count: 


1 This event is implemented. 





[29] | BUS_CYCLES 


Bus cycle: 


1 This event is implemented. 





[28] | TTBR_WRITE RETIRED 


TTBR write, architecturally executed, condition check pass - write to translation table base: 


1 This event is implemented. 





[27] | INST_SPEC 


Instruction speculatively executed: 


1 This event is implemented. 





[26] |] MEMORY ERROR 


Local memory error: 





1 This event is implemented. 
[25] | BUS_ACCESS Bus access: 
1 This event is implemented. 





[24] | L2D_CACHE_WB 








L2 Data cache Write-Back: 














1 This event is implemented. 
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D5.2 PMCEIDO_ELO, Performance Monitors Common Event Identification Register 0, ELO 


Table D5-2 PMU common events (continued) 


















































Bit | Event mnemonic Description 
[23] ) L2D_CACHE_REFILL L2 Data cache refill: 
1 This event is implemented. 
[22] | L2D_CACHE L2 Data cache access: 
1 This event is implemented. 
[21] | LID_CACHE_WB L1 Data cache Write-Back: 
1 This event is implemented. 
[20] | L1I_ CACHE L1 Instruction cache access: 
1 This event is implemented. 
[19] | MEM_ACCESS Data memory access: 
1 This event is implemented. 
[18] )] BR_PRED Predictable branch speculatively executed: 
1 This event is implemented. 
[17] | CPU_CYCLES Cycle: 
1 This event is implemented. 
[16] | BR_MIS_PRED Mispredicted or not predicted branch speculatively executed: 
1 This event is implemented. 
[15] |} UNALIGNED_LDST_RETIRED ] Ipstruction architecturally executed, condition check pass - unaligned load or store: 
i) This event is not implemented. 
[14] ] BR_LRETURN_RETIRED Instruction architecturally executed, condition check pass - procedure retum: 
) This event is not implemented. 
[13] ] BR_IMMED_RETIRED Instruction architecturally executed - immediate branch: 
) This event is not implemented. 
[12] ) PC_WRITE_RETIRED Instruction architecturally executed, condition check pass - software change of the PC: 
) This event is not implemented. 
[11] | CID_WRITE_RETIRED Instruction architecturally executed, condition check pass - write to CONTEXTIDR: 
1 This event is implemented. 
[10] | EXC_RETURN Instruction architecturally executed, condition check pass - exception return: 








1 This event is implemented. 
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Table D5-2 PMU common events (continued) 






































Bit | Event mnemonic Description 
[9] | EXC_TAKEN Exception taken: 
1 This event is implemented. 
[8] | INST_RETIRED Instruction architecturally executed: 
1 This event is implemented. 
[7] | ST_RETIRED Instruction architecturally executed, condition check pass - store: 
7) This event is not implemented. 
[6] | LD_RETIRED Instruction architecturally executed, condition check pass - load: 
7) This event is not implemented. 
[5] | LID_TLB_REFILL L1 Data TLB refill: 
1 This event is implemented. 
[4] | LID_CACHE L1 Data cache access: 
1 This event is implemented. 
[3] | LID_CACHE_REFILL L1 Data cache refill: 
1 This event is implemented. 
[2] | L1ITLB_REFILL L1 Instruction TLB refill: 
1 This event is implemented. 
[1] | LII_CACHE REFILL L1 Instruction cache refill: 
1 This event is implemented. 
[0] | SW_INCR Instruction architecturally executed, condition check pass - software increment: 








1 This event is implemented. 








The PMU events implemented in the above table can be found in Event number PMU event bus (to 
trace) Event mnemonic Event description 0x0 [00] SW_INCR Software increment. Instruction 
architecturally executed (condition code check pass). 0x1 [01] LII_CACHE_REFILL L1 instruction 
cache refill. This event counts any instruction fetch which misses in the cache. The ... on page C2-376. 
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D5.3 PMCEID1_ELO, Performance Monitors Common Event Identification Register 
1, ELO 


The PMCEID1_ELO defines which common architectural and common microarchitectural feature events 
are implemented. 


Bit field descriptions 


31 1615 0 


rss 


RESO 


Figure D5-2 PMCEID1_ELO bit assignments 
RESO, [31:16] 
RESO Reserved. 
ID[47:32], [15:0] 


Common architectural and microarchitectural feature events that can be counted by the PMU 
event counters. 


For each bit described in the following table, the event is implemented if the bit is set to 1, or 
not implemented if the bit is set to 0. 


Table D5-3 PMU common events 


















































Bit | Event mnemonic Description 
[15] | L2D_TLB Attributable Level 2 data or unified TLB access. 
1 This event is implemented. 
{13] | L2D_TLB_ REFILL Attributable Level 2 data or unified TLB refill. 
1 This event is implemented. 
{6] |L11TLB Level | instruction TLB access. 
1 This event is implemented. 
[5] | L1D_TLB Level 1 data TLB access. 
1 This event is implemented. 
[4] | STALL_ BACKEND No operation issued due to backend. 
1 This event is implemented. 
[3] | STALL_FRONTEND No operation issued due to frontend. 
1 This event is implemented. 
[2] |BR_MIS_ PRED RETIRED | Instruction architecturally executed, mispredicted branch. 
1 This event is not implemented. 
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D5.3 PMCEID1_ELO, Performance Monitors Common Event Identification Register 1, ELO 


Table D5-3 PMU common events (continued) 





Bit | Event mnemonic 


Description 





[1] |BR_RETIRED 


Instruction architecturally executed, branch. 


1 This event is implemented. 








[0] | L2D_CACHE ALLOCATE | Level 2 data cache allocation without refill. 





1 This event is implemented. 











Note 





The PMU events implemented in the above table can be found in Event number PMU event bus (to 
trace) Event mnemonic Event description 0x0 [00] SW_INCR Software increment. Instruction 
architecturally executed (condition code check pass). 0x1 [01] LII_CACHE_REFILL L1 instruction 
cache refill. This event counts any instruction fetch which misses in the cache. The ... on page C2-376. 
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D5.4 PMCR_ELO, Performance Monitors Control Register, ELO 


The PMCR_ELO provides details of the Performance Monitors implementation, including the number of 
counters implemented, and configures and controls the counters. 


Bit field descriptions 


24 23 1615 11 10 76543 2 1 0 





RESO 


Figure D5-3 PMCR_ELO bit assignments 
IMP, [31:24] 
Implementer code: 


@x41 Arm. 


This is a read-only field. 
IDCODE, [23:16] 

Identification code: 

@x@B Cortex-A76. 

This is a read-only field. 
N, [15:11] 

Number of event counters. 

@bee118 Six counters. 
RESO, [10:7] 

RESO Reserved. 
LC, [6] 


Long cycle count enable. Determines which PMCCNTR_ELO bit generates an overflow 
recorded in PMOVSRJ[31]. The possible values are: 





7) Overflow on increment that changes PMCCNTR_ELO[31] from 1 to 0. 
1 Overflow on increment that changes PMCCNTR_ELO[63] from | to 0. 

DP, [5] 
Disable cycle counter, PMCCNTR_ELO when event counting is prohibited: 
) Cycle counter operates regardless of the non-invasive debug authentication settings. 

This is the reset value. 

1 Cycle counter is disabled if non-invasive debug is not permitted and enabled. 
This bit is read/write. 

X, [4] 
Export enable. This bit permits events to be exported to another debug device, such as a trace 
macrocell, over an event bus: 
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D5.4 PMCR_ELO, Performance Monitors Control Register, ELO 


) Export of events is disabled. This is the reset value. 


1 Export of events is enabled. 


This bit is read/write and does not affect the generation of Performance Monitors interrupts on 
the nPMUIRQ pin. 


D, [3] 
Clock divider: 
) When enabled, PMCCNTR_ELO counts every clock cycle. This is the reset value. 
1 When enabled, PMCCNTR_ELO counts every 64 clock cycles. 
This bit is read/write. 
C, [2] 
Clock counter reset. This bit is WO. The effects of writing to this bit are: 
7) No action. This is the reset value. 
1 Reset PMCCNTR_ELO to 0. 
This bit is always RAZ. 


Resetting PMCCNTR_ELO does not clear the PMCCNTR_ELO overflow bit to 0. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile for more information. 


P, [1] 
Event counter reset. This bit is WO. The effects of writing to this bit are: 
) No action. This is the reset value. 
1 Reset all event counters, not including PMCCNTR_ELO, to zero. 
This bit is always RAZ. 


In Non-secure ELO and EL1, a write of 1 to this bit does not reset event counters that 
MDCR_EL2.HPMN reserves for EL2 use. 


In EL2 and EL3, a write of 1 to this bit resets all the event counters. 
Resetting the event counters does not clear any overflow bits to 0. 
E, [0] 
Enable. The possible values of this bit are: 
@ All counters, including PMCCNTR_ELO, are disabled. This is the reset value. 
1 All counters are enabled. 
This bit is RW. 


In Non-secure ELO and EL1, this bit does not affect the operation of event counters that 
MDCR_EL2.HPMN reserves for EL2 use. 


On Warm reset, the field resets to 0. 
Configurations 


AArch64 System register PMCR_ELO is architecturally mapped to AArch32 System register 
PMCR. 


Bit fields and details that are not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 
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Chapter D6 
Memory-mapped PMU registers 


This chapter describes the memory-mapped PMU registers and shows examples of how to use them. 


It contains the following sections: 

¢« D6.1 Memory-mapped PMU register summary on page D6-458. 

¢ D6.2 PMCFGR, Performance Monitors Configuration Register on page D6-462. 

¢« D6.3 PMCIDRO, Performance Monitors Component Identification Register 0 on page D6-463. 
« D6.4 PMCIDRI1, Performance Monitors Component Identification Register 1 on page D6-464. 
¢ D6.5 PMCIDR2, Performance Monitors Component Identification Register 2 on page D6-465. 
¢ D6.6 PMCIDR3, Performance Monitors Component Identification Register 3 on page D6-466. 
¢ D6.7 PMPIDRO, Performance Monitors Peripheral Identification Register 0 on page D6-467. 
¢ D6.8 PMPIDR1, Performance Monitors Peripheral Identification Register I on page D6-468. 
¢ D6.9 PMPIDR2, Performance Monitors Peripheral Identification Register 2 on page D6-469. 
¢ D6.10 PMPIDR3, Performance Monitors Peripheral Identification Register 3 on page D6-470. 
¢« D6.11 PMPIDR4, Performance Monitors Peripheral Identification Register 4 on page D6-471. 
¢ D6.12 PMPIDRn, Performance Monitors Peripheral Identification Register 5-7 on page D6-472. 
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D6 Memory-mapped PMU registers 
D6.1 Memory-mapped PMU register summary 


There are PMU registers that are accessible through the external debug interface. 


These registers are listed in the following table. For those registers not described in this chapter, see the 
Arm® Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


Table D6-1 Memory-mapped PMU register summary 








































































































Offset Name Type Description 
8x00 PMEVCNTRO_ELO RW Performance Monitor Event Count Register 
0 
@x0e4 - - Reserved 
@xee8 PMEVCNTR1_ELO RW Performance Monitor Event Count Register 
1 
@x@OC - - Reserved 
@x010 PMEVCNTR2_ELO RW Performance Monitor Event Count Register 
2 
@xe14 - - Reserved 
0x018 PMEVCNTR3_ELO RW Performance Monitor Event Count Register 
3 
@x@1C 7 - Reserved 
@x020 PMEVCNTR4_ELO RW Performance Monitor Event Count Register 
4 
@x024 - - Reserved 
@x028 PMEVCNTR5_ELO RW Performance Monitor Event Count Register 
5 
@x@2C-OxF4 - - Reserved 
OxOF8 PMCCNTR_ELO[31:0] RW Performance Monitor Cycle Count Register 
OxOFC PMCCNTR_ELO0[63:32] RW 
@x200 PMPCSRJ31:0] RO Program Counter Sample Register 
@x204 PMPCSR[63:32] 
Qx208 PMCIDISR RO CONTEXTIDR_EL1 Sample Register 
@x20C PMVIDSR RO VMID Sample Register 
@x220 PMPCSR[31:0] RO Program Counter Sample Register (alias) 
@x224 PMPCSR[63:32] 
Qx228 PMCIDISR RO CONTEXTIDR_EL1 Sample Register 
(alias) 
@x22C PMCID2SR RO CONTEXTIDR_EL2 Sample Register 
@x100-Ox3FC - - Reserved 
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D6 Memory-mapped PMU registers 
D6.1 Memory-mapped PMU register summary 


Table D6-1 Memory-mapped PMU register summary (continued) 






















































































Offset Name Type Description 

@x418-0x478 - - Reserved 

@x47C PMCCFILTR_ELO RW Performance Monitor Cycle Count Filter 
Register 

@x600 PMPCSSR_LO RO D7.2 PMPCSSR, Snapshot Program 

ex6od4 PMPCSSR_HI RO Counter Sample Register on page D7-475 

@x608 PMCIDSSR RO D7.3 PMCIDSSR, Snapshot 
CONTEXTIDR_ELI Sample Register 
on page D7-476 

@x60C PMCID2SSR RO D7.4 PMCID2SSR, Snapshot 
CONTEXTIDR_EL2 Sample Register 
on page D7-477 

@x610 PMSSSR RO D7.5 PMSSSR, PMU Snapshot Status 
Register on page D7-478 

@x614 PMOVSSR RO D7.6 PMOVSSR, PMU Overflow Status 
Snapshot Register on page D7-479 

@x618 PMCCNTSR_LO RO D7.7 PMCCNTSR, PMU Cycle Counter 

ex61c PMCCNTSR_HI RO Snapshot Register on page D7-480 

@x620+ 4xn PMEVCNTSRn RO D7.8 PMEVCNTSRn, PMU Cycle Counter 
Snapshot Registers 0-5 on page D7-481 

Ox6FO PMSSCR WO D7.9 PMSSCR, PMU Snapshot Capture 
Register on page D7-482 

@xCee PMCNTENSET_ELO RW Performance Monitor Count Enable Set 
Register 

@xC@4-8xC1C = - Reserved 

@xC20 PMCNTENCLR_ELO RW Performance Monitor Count Enable Clear 
Register 

@xC24-@xC3C 2 - Reserved 

8xC40 PMINTENSET ELI RW Performance Monitor Interrupt Enable Set 
Register 

@xC44-@xC5C - - Reserved 

@xC60 PMINTENCLR ELI RW Performance Monitor Interrupt Enable 
Clear Register 

@xC64-@xC7C - - Reserved 

@xC80 PMOVSCLR_ELO RW Performance Monitor Overflow Flag Status 
Register 

@xC84-@xC9C - - Reserved 

@xCA@ PMSWINC_ELO wo Performance Monitor Software Increment 
Register 
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D6 Memory-mapped PMU registers 
D6.1 Memory-mapped PMU register summary 


Table D6-1 Memory-mapped PMU register summary (continued) 


































































































Offset Name Type Description 
@xCA4-@xCBC - - Reserved 
e@xCCce PMOVSSET_ELO RW Performance Monitor Overflow Flag Status 
Set Register 
@xCC4-@xDFC - - Reserved 
@xE@O PMCFGR RO D6.2 PMCFGR, Performance Monitors 
Configuration Register on page D6-462 
@xE@4 PMCR_ELO RW Performance Monitors Control Register. 
This register is distinct from the 
PMCR_ELO system register. It does not 
have the same value. 
@xE@8-OxE1C - - Reserved 
@xE20 PMCEIDO RO D5.2 PMCEIDO_ELO, Performance 
Monitors Common Event Identification 
Register 0, ELO on page D5-450 
@xE24 PMCEID1 RO D5.3 PMCEID1_ELO, Performance 
Monitors Common Event Identification 
Register 1, ELO on page DS-453 
@xE28 PMCEID2 RO 
@xE2C PMCEID3 RO 
@xFA4 - - Reserved 
OxFA8 PMDEVAFFO RO B2.86 MPIDR_EL1, Multiprocessor 
Affinity Register, ELI on page B2-269 
@xFAC PMDEVAFF 1 RO B2.86 MPIDR_EL1, Multiprocessor 
Affinity Register, EL1 on page B2-269 
OxFB8 PMAUTHSTATUS RO Performance Monitor Authentication Status 
Register 
@xFBC PMDEVARCH RO Performance Monitor Device Architecture 
Register 
@xFC@-OxFC8 - - Reserved 
@xFCC PMDEVTYPE RO Performance Monitor Device Type Register 
@xFDO PMPIDR4 RO D6.11 PMPIDR4, Performance Monitors 
Peripheral Identification Register 4 
on page D6-471 
@xFD4 PMPIDRS RO D6.12 PMPIDRn, Performance Monitors 
@xFEDS PMPIDR6 RO Peripheral Identification Register 5-7 
on page D6-472 
@xFDC PMPIDR7 RO 
@xFEO PMPIDRO RO D6.7 PMPIDRO, Performance Monitors 
Peripheral Identification Register 0 
on page D6-467 
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D6 Memory-mapped PMU registers 
D6.1 Memory-mapped PMU register summary 


Table D6-1 Memory-mapped PMU register summary (continued) 





Offset Name Type Description 





OxFE4 PMPIDRI1 RO D6.8 PMPIDR1, Performance Monitors 
Peripheral Identification Register 1 
on page D6-468 





@xFE8 PMPIDR2 RO D6.9 PMPIDR2, Performance Monitors 
Peripheral Identification Register 2 
on page D6-469 





@xFEC PMPIDR3 RO D6.10 PMPIDR3, Performance Monitors 
Peripheral Identification Register 3 
on page D6-470 





OxFFO PMCIDRO RO D6.3 PMCIDRO, Performance Monitors 
Component Identification Register 0 
on page D6-463 





OxFF4 PMCIDRI1 RO D6.4 PMCIDRI, Performance Monitors 
Component Identification Register 1 
on page D6-464 





OxFF8 PMCIDR2 RO D6.5 PMCIDR2, Performance Monitors 
Component Identification Register 2 
on page D6-465 





OxFFC PMCIDR3 RO D6.6 PMCIDR3, Performance Monitors 
Component Identification Register 3 
on page D6-466 
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D6 Memory-mapped PMU registers 
D6.2 PMCFGR, Performance Monitors Configuration Register 


D6.2 PMCFGR, Performance Monitors Configuration Register 
The PMCFGR contains PMU specific configuration data. 


Bit field descriptions 
The PMCFGR is a 32-bit register. 


31 17 16 15 14 13 8 7 0 


L_cec 
RESO CCD 
EX 


Figure D6-1 PMCFGR bit assignments 
RESO, [31:17] 


RESO Reserved. 
EX, [16] 

Export supported. The value is: 

1 Export is supported. PMCR_ELO.EX is read/write. 
CCD, [15] 

Cycle counter has pre-scale. The value is: 

1 PMCR_ELO.D is read/write. 
CC, [14] 

Dedicated cycle counter supported. The value is: 

1 Dedicated cycle counter is supported. 
Size, [13:8] 


Counter size. The value is: 
@b111111 64-bit counters. 
N, [7:0] 
Number of event counters. The value is: 


@x0@6 Six counters. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé, for Armv8-A architecture profile. 


The PMCFGR can be accessed through the external debug interface, offset @xEee. 
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D6 Memory-mapped PMU registers 
D6.3 PMCIDRO, Performance Monitors Component Identification Register 0 


D6.3 PMCIDRO, Performance Monitors Component Identification Register 0 
The PMCIDRO provides information to identify a Performance Monitor component. 


Bit field descriptions 
The PMCIDR0O is a 32-bit register. 


31 8 7 0 


RESO 


Figure D6-2 PMCIDRO bit assignments 
RESO, [31:8] 
RESO Reserved. 
PRMBL_ 0, [7:0] 
@x@D Preamble byte 0. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The PMCIDRO can be accessed through the external debug interface, offset @xFF®. 
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D6 Memory-mapped PMU registers 
D6.4 PMCIDR1, Performance Monitors Component Identification Register 1 


D6.4 PMCIDR1, Performance Monitors Component Identification Register 1 


The PMCIDRI provides information to identify a Performance Monitor component. 


Bit field descriptions 
The PMCIDR1 is a 32-bit register. 


31 8 7 4 3 0 
RESO 


Figure D6-3 PMCIDR1 bit assignments 
RESO, [31:8] 
RESO Reserved. 
CLASS, [7:4] 
@x9 Debug component. 
PRMBL._1, [3:0] 
@x® Preamble byte 1. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The PMCIDRI can be accessed through the external debug interface, offset @xFF4. 
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D6 Memory-mapped PMU registers 
D6.5 PMCIDR2, Performance Monitors Component Identification Register 2 


D6.5 PMCIDR2, Performance Monitors Component Identification Register 2 
The PMCIDR2 provides information to identify a Performance Monitor component. 


Bit field descriptions 
The PMCIDR2 is a 32-bit register. 


31 8 7 0 


RESO 


Figure D6-4 PMCIDR2 bit assignments 
RESO, [31:8] 
RESO Reserved. 
PRMBL 2, [7:0] 
@x@5 ~~ Preamble byte 2. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The PMCIDR2 can be accessed through the external debug interface, offset @xFF8. 
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D6 Memory-mapped PMU registers 
D6.6 PMCIDR3, Performance Monitors Component Identification Register 3 


D6.6 PMCIDR3, Performance Monitors Component Identification Register 3 
The PMCIDR3 provides information to identify a Performance Monitor component. 


Bit field descriptions 
The PMCIDR3 is a 32-bit register. 


31 8 7 0 


RESO 


Figure D6-5 PMCIDR3 bit assignments 
RESO, [31:8] 
RESO Reserved. 
PRMBL_ 3, [7:0] 
@xB1 Preamble byte 3. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The PMCIDR3 can be accessed through the external debug interface, offset @xFFC. 
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D6 Memory-mapped PMU registers 
D6.7 PMPIDRO, Performance Monitors Peripheral Identification Register 0 


D6.7 PMPIDRO, Performance Monitors Peripheral Identification Register 0 
The PMPIDRO provides information to identify a Performance Monitor component. 


Bit field descriptions 
The PMPIDR0O is a 32-bit register. 


31 8 7 0 


a 


RESO 


Figure D6-6 PMPIDRO bit assignments 
RESO, [31:8] 
RESO Reserved. 
Part_0, [7:0] 


@x@B Least significant byte of the performance monitor part number. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The PMPIDRO can be accessed through the external debug interface, offset @xFE@. 
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D6 Memory-mapped PMU registers 
D6.8 PMPIDR1, Performance Monitors Peripheral Identification Register 1 


D6.8 PMPIDR1, Performance Monitors Peripheral Identification Register 1 
The PMPIDR1 provides information to identify a Performance Monitor component. 


Bit field descriptions 
The PMPIDR1 is a 32-bit register. 


31 8 7 4 3 0 


RESO 


Figure D6-7 PMPIDR1 bit assignments 
RESO, [31:8] 
RESO Reserved. 
DES_0, [7:4] 
@xB Arm Limited. This is the least significant nibble of JEP106 ID code. 
Part_1, [3:0] 


@xD Most significant nibble of the performance monitor part number. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé6, for Armv8-A architecture profile. 


The PMPIDRI can be accessed through the external debug interface, offset @xFE4. 
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D6 Memory-mapped PMU registers 
D6.9 PMPIDR2, Performance Monitors Peripheral Identification Register 2 


D6.9 PMPIDR2, Performance Monitors Peripheral Identification Register 2 


The PMPIDR2 provides information to identify a Performance Monitor component. 


Bit field descriptions 
The PMPIDR2 is a 32-bit register. 


31 8 7 432 0 
JEDEC —! 
RESO 


Figure D6-8 PMPIDR2 bit assignments 
RESO, [31:8] 
RESO Reserved. 
Revision, [7:4] 


@x® r0p0. 


JEDEC, [3] 
@b1 RAO. Indicates a JEP 106 identity code is used. 
DES_1, [2:0] 
@be11 Arm Limited. This is the most significant nibble of JEP106 ID code. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé6, for Armv8-A architecture profile. 


The PMPIDR2 can be accessed through the external debug interface, offset @xFE8. 
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D6 Memory-mapped PMU registers 
D6.10 PMPIDR3, Performance Monitors Peripheral Identification Register 3 


D6.10 PMPIDR3, Performance Monitors Peripheral Identification Register 3 


The PMPIDR3 provides information to identify a Performance Monitor component. 


Bit field descriptions 
The PMPIDR3 is a 32-bit register. 


31 8 7 4 3 0 
RESO 


Figure D6-9 PMPIDR3 bit assignments 
RESO, [31:8] 


RESO Reserved. 


REVAND, [7:4] 


@xe Part minor revision. 
CMOD, [3:0] 
@xe Customer modified. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The PMPIDR3 can be accessed through the external debug interface, offset @xFEC. 
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D6 Memory-mapped PMU registers 
D6.11 PMPIDR4, Performance Monitors Peripheral Identification Register 4 


D6.11 | PMPIDR4, Performance Monitors Peripheral Identification Register 4 
The PMPIDR4 provides information to identify a Performance Monitor component. 


Bit field descriptions 
The PMPIDR4 is a 32-bit register. 


31 8 7 4 3 0 


RESO 


Figure D6-10 PMPIDR4 bit assignments 
RESO, [31:8] 
RESO Reserved. 
Size, [7:4] 


@x® Size of the component. Log, the number of 4KB pages from the start of the 
component to the end of the component ID registers. 


DES 2, [3:0] 
@x4 Arm Limited. This is the least significant nibble JEP 106 continuation code. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé6, for Armv8-A architecture profile. 


The PMPIDR4 can be accessed through the external debug interface, offset @xFD@. 
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D6 Memory-mapped PMU registers 
D6.12 PMPIDRn, Performance Monitors Peripheral Identification Register 5-7 


D6.12 PMPIDRn, Performance Monitors Peripheral Identification Register 5-7 
No information is held in the Peripheral ID5, Peripheral ID6, and Peripheral ID7 Registers. 


They are reserved for future use and are RESO. 
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Chapter D7 
PMU snapshot registers 


PMU snapshot registers are an IMPLEMENTATION DEFINED extension to an Armv8-A compliant PMU to 
support an external core monitor that connects to a system profiler. 


It contains the following sections: 

¢ D7.1 PMU snapshot register summary on page D7-474. 

¢ D7.2 PMPCSSR, Snapshot Program Counter Sample Register on page D7-475. 

¢ D7.3 PMCIDSSR, Snapshot CONTEXTIDR_EL1 Sample Register on page D7-476. 
¢ D7.4 PMCID2SSR, Snapshot CONTEXTIDR_EL2 Sample Register on page D7-477. 
¢ D7.5 PMSSSR, PMU Snapshot Status Register on page D7-478. 

¢ D7.6 PMOVSSR, PMU Overflow Status Snapshot Register on page D7-479. 

¢ D7.7 PMCCNTSR, PMU Cycle Counter Snapshot Register on page D7-480. 

¢ D7.8 PMEVCNTSRn, PMU Cycle Counter Snapshot Registers 0-5 on page D7-481. 
¢ D7.9 PMSSCR, PMU Snapshot Capture Register on page D7-482. 
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D7 PMU snapshot registers 
D7.1 PMU snapshot register summary 






























































D7.1 PMU snapshot register summary 
The snapshot registers are visible in an IMPLEMENTATION DEFINED region of the PMU external debug 
interface. Each time the debugger sends a snapshot request, information is collected to see how the code 
is executed in the different cores. 
The following table describes the PMU snapshot registers implemented in the core. 
Table D7-1 PMU snapshot register summary 
Offset Name Type | Width | Description 
Qx600 PMPCSSR LO |RO | 32 D7.2 PMPCSSR, Snapshot Program Counter Sample Register on page D7-475 
0x604 PMPCSSR_HI RO | 32 
Qx608 PMPCIDSSR RO /|32 D7.3 PMCIDSSR, Snapshot CONTEXTIDR_EL1 Sample Register on page D7-476 
@x60C PMPCID2SSR RO | 32 D7.4 PMCID2SSR, Snapshot CONTEXTIDR_EL2 Sample Register on page D7-477 
0x610 PMSSSR RO | 32 D7.5 PMSSSR, PMU Snapshot Status Register on page D7-478 
0x614 PMOVSSR RO | 32 D7.6 PMOVSSR, PMU Overflow Status Snapshot Register on page D7-479 
0x618 PMCCNTSR_LO|RO- | 32 D7.7 PMCCNTSR, PMU Cycle Counter Snapshot Register on page D7-480 
8x61C PMCCNTSR_HI |RO- | 32 
@x620+ 4xn|PMEVCNTSRn |RO- | 32 D7.8 PMEVCNTSRn, PMU Cycle Counter Snapshot Registers 0-5 on page D7-481 
Ox6FO PMSSCR WO | 32 D7.9 PMSSCR, PMU Snapshot Capture Register on page D7-482 
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D7 PMU snapshot registers 
D7.2 PMPCSSR, Snapshot Program Counter Sample Register 


D7.2 PMPCSSR, Snapshot Program Counter Sample Register 
The PMPCSSR is an alias for the PCSR register. 


However, unlike the other view of PCSR, it is not sensitive to reads. That is, reads of PMPCSSR through 
the PMU snapshot view do not cause a new sample capture and do not change CIDSR, CID2SR, or 
VIDSR. 

Bit field descriptions 


The PMPCSSR is a 64-bit read-only register. 


63 62 61 60 56 55 0 
L_NsS 
RESO 


Figure D7-1 PMPCSSR bit assignments 
NS, [63] 


Non-secure sample. 


EL, [62:61] 
Exception level sample. 


RESO, [60:56] 
Reserved, RESO. 


PC, [55:0] 
Sampled PC. 


Configurations 
There are no configuration notes. 


Usage constraints 
Any access to PMPCSSR returns an error if any of the following occurs: 


¢ The core power domain is off. 
¢ DoubleLockStatus() == TRUE. 
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D7 PMU snapshot registers 
D7.3 PMCIDSSR, Snapshot CONTEXTIDR_EL1 Sample Register 


D7.3 PMCIDSSR, Snapshot CONTEXTIDR_EL1 Sample Register 
The PMCIDSSR is an alias for the CIDSR register. 


Configurations 


There are no configuration notes. 


Usage constraints 
Any access to PMCIDSSR returns an error if any of the following occurs: 


¢ The core power domain is off. 
* DoubleLockStatus() == TRUE. 
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D7 PMU snapshot registers 
D7.4 PMCID2SSR, Snapshot CONTEXTIDR_EL2 Sample Register 


D7.4 PMCID2SSR, Snapshot CONTEXTIDR_EL2 Sample Register 
The PMCID2SSR is an alias for the CID2SR register. 


Configurations 


There are no configuration notes. 


Usage constraints 
Any access to PMCID2SSR returns an error if any of the following occurs: 


¢ The core power domain is off. 
* DoubleLockStatus() == TRUE. 
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D7 PMU snapshot registers 
D7.5 PMSSSR, PMU Snapshot Status Register 


D7.5 PMSSSR, PMU Snapshot Status Register 


The PMSSSR holds status information about the captured counters. 


Bit field descriptions 
The PMSSSR is a 32-bit read-only register. 


31 10 
Nc— 
RESO 


Figure D7-2 PMSSSR bit assignments 


RESO, [31:1] 


NC, [0] 


Reserved, RESO. 


No capture. This bit indicates whether the PMU counters have been captured. The possible 
values are: 


0 PMU counters are captured. 


1 PMU counters are not captured. 


If there is a security violation, the core does not capture the event counters. The external monitor 
is responsible for keeping track of whether it managed to capture the snapshot registers from the 
core. 


This bit does not reflect the status of the captured Program Counter Sample registers. 


The core resets this bit to 1 by a Warm reset but MPSSSR.NC is overwritten at the first capture. 


Configurations 


There are no configuration notes. 


Usage constraints 
Any access to PMSSSR returns an error if any of the following occurs: 


The core power domain is off. 
DoubleLockStatus() == TRUE. 
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D7 PMU snapshot registers 
D7.6 PMOVSSR, PMU Overflow Status Snapshot Register 


D7.6 PMOVSSR, PMU Overflow Status Snapshot Register 
The PMOVSSR is a captured copy of PMOVSR. 


Once it is captured, the value in PMOVSSR is unaffected by writes to PMOVSSET_ELO and 
PMOVSCLR_ELO. 


Configurations 


There are no configuration notes. 


Usage constraints 
Any access to PMOVSSR returns an error if any of the following occurs: 


¢ The core power domain is off. 
¢« DoubleLockStatus() == TRUE. 
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D7 PMU snapshot registers 
D7.7 PMCCNTSR, PMU Cycle Counter Snapshot Register 


D7.7 PMCCNTSR, PMU Cycle Counter Snapshot Register 
The PMCCNTSR is a captured copy of PMCCNTR_ELO. 


Once it is captured, the value in PMCCNTSR is unaffected by writes to PMCCNTR_ELO and 
PMCR_ELO.C. 


Configurations 


There are no configuration notes. 


Usage constraints 
Any access to PMCCNTSR returns an error if any of the following occurs: 


¢ The core power domain is off. 
¢« DoubleLockStatus() == TRUE. 
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D7 PMU snapshot registers 
D7.8 PMEVCNTSRn, PMU Cycle Counter Snapshot Registers 0-5 


D7.8 PMEVCNTSRn, PMU Cycle Counter Snapshot Registers 0-5 
The PMEVCNTSRza, are captured copies of PMEVCNTRn_ELO, n is 0-5. 


When they are captured, the value in PMSSEVCNTRn is unaffected by writes to PMSSEVCNTRn_ELO 
and PMCR_ELO.P. 


Configurations 


There are no configuration notes. 


Usage constraints 

Any access to PMSSEVCNTRn returns an error if any of the following occurs: 
¢ The core power domain is off. 

¢ DoubleLockStatus() == TRUE. 
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D7 PMU snapshot registers 
D7.9 PMSSCR, PMU Snapshot Capture Register 


PMSSCR, PMU Snapshot Capture Register 


The PMSSCR provides a mechanism for software to initiate a sample. 


Bit field descriptions 
The PMSSCR is a 32-bit write-only register. 


31 10 
ss— 
RESO 


Figure D7-3 PMSSCR bit assignments 


RESO, [31:1] 

Reserved, RESO. 
SS, [0] 

Capture now. The possible values are: 

0 IGNORED. 

1 Initiate a capture immediately. 
Configurations 


There are no configuration notes. 


Usage constraints 
Any access to PMSSCR returns an error if any of the following occurs: 


¢ The core power domain is off. 
*« DoubleLockStatus() == TRUE. 
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Chapter D8 
AArch64 AMU registers 


This chapter describes the AArch64 AMU registers and shows examples of how to use them. 


It contains the following sections: 

¢ D8s.1 AArch64 AMU register summary on page D8-484. 

¢ D8.2 AMCNTENCLRO_ELO, Activity Monitors Count Enable Clear Register, ELO on page D8-485. 
¢ D8.3 AMCNTENSET _ELO, Activity Monitors Count Enable Set Register, ELO on page D8-486. 

¢ D84AMCFGR_ELO, Activity Monitors Configuration Register, ELO on page D8-487. 

¢ D85 AMUSERENR_ELO, Activity Monitor ELO Enable access, ELO on page D8-489. 

* D8.6 AMEVCNTRn_ELO, Activity Monitor Event Counter Register, ELO on page D8-491. 

* Dé8.7 AMEVTYPERn_ELO, Activity Monitor Event Type Register, ELO on page D8-492. 
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D8.1 AArch64 AMU register summary 


The following table gives a summary of the Cortex-A76 AMU registers in the AArch64 Execution state. 


D8 AArch64 AMU registers 
D8.1 AArch64 AMU register summary 


Table D8-1 AArch64 AMU registers 























Name Width | Reset Description 

AMCNTENCLR_ELO | 32 0xeee00000 D8.2 AMCNTENCLRO_ELO, Activity Monitors Count 
Enable Clear Register, ELO on page D8-485 

AMCNTENSET ELO | 32 0xe9000800 D8.3 AMCNTENSET ELO, Activity Monitors Count Enable 
Set Register, ELO on page D8-486 

AMCFGR_ELO 32 Qx00003FO04 D8.4 AMCFGR_ELDO, Activity Monitors Configuration 
Register, ELO on page D8-487 

AMUSERENR ELO | 32 0xee000000 D8.5 AMUSERENR_ELO, Activity Monitor ELO Enable 
access, ELO on page D8-489 

AMEVCNTRn ELO = | 64 0x0800000080000000 D8.6 AMEVCNTRn_ELO, Activity Monitor Event Counter 
Register, ELO on page D8-491 

AMEVTYPERn ELO | 32 The reset value depends on the D8.7 AMEVTYPERn_ELO, Activity Monitor Event Type 














register: 

« AMEVTYPERO ELO= 
@x00000011. 

« AMEVTYPERI ELO= 
QOxOQQ0QGEF. 

* AMEVTYPER2_ ELO= 
Qx00000008. 

« AMEVTYPER3 ELO= 
QOx0QQ000F QO. 

« AMEVTYPER4 ELO= 
Q@x0Q0000F 1. 








Register, ELO on page D8-492 
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D8 AArch64 AMU registers 
D8.2 AMCNTENCLRO_ELO, Activity Monitors Count Enable Clear Register, ELO 


D8.2 AMCNTENCLRO_ELO, Activity Monitors Count Enable Clear Register, ELO 
The AMCNTENCLRO ELO disables the activity monitor counters implemented, AMEVCNTRO-4. 


Bit field descriptions 
The AMCNTENCLR _ ELO is a 32-bit register. 
P<n>, bit[n] 
AMEVCNTRn disable bit. The possible values are: 


0 When this bit is read, the activity counter n is disabled. When it is written, it has no 
effect. 
1 When this bit is read, the activity counter n is enabled. When it is written, it disables 


the activity counter n. 


Configurations 
There are no configuration notes. 


Usage constraints 
Accessing the AMCNTENCLR_ELO 
To access the AMCNTENCLR_ELO: 


MRS <Xt>, AMCNTENCLR_EL@ ; Read AMCNTENCLR_EL® into Xt 
MSR AMCNTENCLR_EL®, <Xt> ; Write <Xt> to AMCNTENCLR_EL@ 


Register access is encoded as follows: 


Table D8-2 AMCNTENCLR_ELO encoding 





op0 | op1 | CRn |} CRm | op2 




















11) }O11 | 1111 | 1001 | 111 





The AMCNTENCLR ELO can be accessed through the external debug interface, offset @xC2e. 
In this case, it is read-only. 


This register is accessible as follows: 





ELO/| EL1 | EL2 | EL3 





RO |RO |;RO | RW 




















Traps and enables 


If ACTLR_EL2.AMEN is 0, then Non-secure accesses to this register from ELO and EL1 are 
trapped to EL2. 


If ACTLR_EL3.AMEN is 0, then accesses to this register from ELO, EL1, and EL2 are trapped 
to EL3. 


If AMUSERENR ELO.EN is 0, then accesses to this register from ELO are trapped to EL1. 
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D8 AArch64 AMU registers 
D8.3 AMCNTENSET_ELO, Activity Monitors Count Enable Set Register, ELO 


D8.3 AMCNTENSET_ELO, Activity Monitors Count Enable Set Register, ELO 
The AMCNTENSET _ELO enables the activity monitor counters implemented, AMEVCNTRn (n is 0-4). 


Bit field descriptions 
The AMCNTENSET ELO is a 32-bit register. 
P<n>, bit[n] 
AMEVCNTRn enable bit. The possible values are: 


0 When this bit is read, the activity counter n is disabled. When it is written, it has no 
effect. 
1 When this bit is read, the activity counter n is enabled. When it is written, it enables 


the activity counter n. 


Configurations 
There are no configuration notes. 


Usage constraints 
Accessing the AMCNTENSET_ELO 
To access the AMCNTENSET ELO: 


MRS <Xt>, AMCNTENSET_EL@ ; Read AMCNTENSET_EL® into Xt 
MSR AMCNTENSET_EL®, <Xt> ; Write <Xt> to AMCNTENSET_EL@ 


Register access is encoded as follows: 


Table D8-3 AMCNTENSET_ELO encoding 





op0 | op1 | CRn | CRm | op2 




















11 | O11 | 1111 | 1001 | 110 





The AMCNTENSET ELO can be accessed through the external debug interface, offset @xCcee. 
In this case, it is read-only. 


This register is accessible as follows: 





ELO | EL1 | EL2 | EL3 





RO |RO |;RO | RW 




















Traps and enables 


If ACTLR_EL2.AMEN is 0, then Non-secure accesses to this register from ELO and EL1 are 
trapped to EL2. 


If ACTLR_EL3.AMEN is 0, then accesses to this register from ELO, EL1, and EL2 are trapped 
to EL3. 


If AMUSERENR_ ELO.EN is 0, then accesses to this register from ELO are trapped to EL1. 
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D8 AArch64 AMU registers 
D8.4 AMCFGR_ELO, Activity Monitors Configuration Register, ELO 


D8.4 AMCFGR_ELO, Activity Monitors Configuration Register, ELO 


The AMCFGR_ELO provides information on the number of activity counters implemented and their size. 


Bit field descriptions 
The AMCFGR_ELO is a 32-bit register. 


31 14 13 8 7 0 


RESO 


Figure D8-1 AMCFGR_ELO bit assignments 


RESO, [31:14] 
Reserved, RESO. 


SIZE, [13:8] 
Size of counters, minus one. 


This field defines the size of the largest counter implemented by the activity monitors. In the 
Armv8-A architecture, the largest counter has 64 bits, therefore the value of this field is 
@b111111. 


N, [7:0] 
Number of activity counters implemented, where the number of counters is N+1. The 
Cortex-A76 core implements five counters, therefore the value is @x@4. 


Configurations 
There are no configuration notes. 


Usage constraints 
Accessing the AMCFGR_ ELO 
To access the AMCFGR_ELO: 


MRS <Xt>, AMCFGR_EL@ ; Read AMCFGR_EL® into Xt 


Register access is encoded as follows: 


Table D8-4 AMCFGR_ELO encoding 





op0 | op1 | CRn | CRm | op2 





11 {O11 | 1111 | 1010 | 110 




















The AMCFGR_ELO can be accessed through the external debug interface, offset @xE@0. In this 
case, it is read-only. 


This register is accessible as follows: 





ELO | EL1 | EL2 | EL3 





RO |RO |RO |RO 
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D8 AArch64 AMU registers 
D8.4 AMCFGR_ELO, Activity Monitors Configuration Register, ELO 
Traps and enables 


If ACTLR_EL2.AMEN is 0, then Non-secure accesses to this register from ELO and EL] are 
trapped to EL2. 


If ACTLR_EL3.AMEN is 0, then accesses to this register from ELO, EL1, and EL2 are trapped 
to EL3. 


If AMUSERENR_ELO.EN is 0, then accesses to this register from ELO are trapped to EL1. 
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D8 AArch64 AMU registers 
D8.5 AMUSERENR_ELO, Activity Monitor ELO Enable access, ELO 


D8.5 AMUSERENR_ELO, Activity Monitor ELO Enable access, ELO 
The AMUSERENR ELO enables or disables ELO access to the activity monitors. 


Bit field descriptions 
The AMUSERENR ELO is a 32-bit register. 


31 10 
EN—! 
RESO 


Figure D8-2 MUSERENR_ELO bit assignments 


RESO, [31:1] 
Reserved, RESO. 
EN, [0] 
Traps ELO accesses to the activity monitor registers to EL1. The possible values are: 
0 ELO accesses to the activity monitor registers are trapped to EL1. 
1 ELO accesses to the activity monitor registers are not trapped to EL1. Software can 
access all activity monitor registers at ELO. 
Configurations 


There are no configuration notes. 


Usage constraints 
Accessing the AMUSERENR_ELO 
To access the AMUSERENR ELO: 


MRS <Xt>, AMUSERENR_EL@ ; Read AMUSERENR_EL®@ into Xt 
MSR AMUSERENR_EL@, <Xt> ; Write Xt to AMUSERENR_EL@ 


Register access is encoded as follows: 


Table D8-5 AMUSERENR_ELO encoding 





op0 | op1 | CRn | CRm | op2 





11 |O11 | 1111 | 1010 | 111 




















This register is accessible as follows: 





ELO | EL1 | EL2 | EL3 





RO |RW | RW | RW 























Note 
AMUSERENR _ELO is always RO at ELO and not trapped by the EN bit. 
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D8 AArch64 AMU registers 
D8.5 AMUSERENR_ELO, Activity Monitor ELO Enable access, ELO 


Traps and enables 


If ACTLR_EL2.AMEN is 0, then Non-secure accesses to this register from ELO and EL1 are 





trapped to EL2. 
If ACTLR_EL3.AMEN is 0, then accesses to this register from ELO, EL1, and EL2 are trapped 
to EL3. 
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D8 AArch64 AMU registers 
D8.6 AMEVCNTRn_ELO, Activity Monitor Event Counter Register, ELO 


D8.6 AMEVCNTRn_ELO, Activity Monitor Event Counter Register, ELO 
The activity counters AMEVCNTRn_EL0O are directly accessible in the memory mapped-view. n is 0-4. 


Bit field descriptions 
The AMEVCNTRn_ELO is a 64-bit register. 


63 0 


ACNT 


Figure D8-3 AMEVCNTRn_ELO bit assignments 


ACNT, [63:0] 


Value of the activity counter AMEVCNTRn _ELO. 


This bit field resets to zero and the counters monitoring cycle events do not increment when the 
core is in WFI or WFE. 


Configurations 


Counters might have fixed event allocation. 


Usage constraints 
Accessing the AMEVCNTRn_ELO 


To access the AMEVCNTRn_ELO: 


MRS <Xt>, AMEVCNTRn_EL@ ; Read AMEVCNTRn_EL® into Xt 
MSR AMEVCNTRn_EL@, <Xt> ; Write Xt to AMEVCNTRn_EL@ 


Register access is encoded as follows: 


Table D8-6 AMEVCNTRn_ELO encoding 





op0 | op1 | CRn | CRm | op2 





11 | O11 | 1111 | 1001 | <0-4> 























The AMEVCNTRn_ELO[63:32] can also be accessed through the external memory-mapped 
interface, offset @x@04+8n. In this case, it is read-only. 


The AMEVCNTRn_ELO[31:0] can also be accessed through the external memory-mapped 
interface, offset @x000+8n. In this case, it is read-only. 


This register is accessible as follows: 





ELO | EL1 | EL2 | EL3 





RO |RO |;RO | RW 




















Traps and enables 


If ACTLR_EL2.AMEN is 0, then Non-secure accesses to this register from ELO and EL1 are 
trapped to EL2. 


If ACTLR_EL3.AMEN is 0, then accesses to this register from ELO, EL1, and EL2 are trapped 
to EL3. 


If AMUSERENR _ELO.EN is 0, then accesses to this register from ELO are trapped to EL1. 
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D8 AArch64 AMU registers 
D8.7 AMEVTYPERn_ELO, Activity Monitor Event Type Register, ELO 


D8.7 AMEVTYPERn_ELO, Activity Monitor Event Type Register, ELO 
The activity counters AMEVTYPER_ELOn are directly accessible in the memory mapped view, where n 
is 0-4. 
Bit field descriptions 
The AMEVTYPERn _ELO is a 32-bit register. 


31 10 9 0 


a 


RESO 


Figure D8-4 AMEVTYPERn_ELO bit assignments 


RESO, [31:10] 
Reserved, RESO. 


evtCount, bits[9:0] 
The event the counter monitors might be fixed at implementation. In this case, the field is read- 
only. See C3.4 AMU events on page C3-391. 


Configurations 
Counters might have fixed event allocation. 


Traps and enables 


If ACTLR_EL2.AMEN is 0, then Non-secure accesses to this register from ELO and EL1 are trapped to 
EL2. 


If ACTLR_EL3.AMEN is 0, then accesses to this register from ELO, EL1, and EL2 are trapped to EL3. 
If AMUSERENR_ELO.EN is 0, then accesses to this register from ELO are trapped to EL1. 


Usage constraints 
Accessing the AMEVTYPERn_ELO 
To access the AMEVTYPERn ELO: 


MRS <Xt>, AMEVTYPERn_EL® ; Read AMEVTYPERn_EL® into Xt 
MSR AMEVTYPERn_EL®, <Xt> ; Write Xt to AMEVTYPERn_EL® 


Register access is encoded as follows: 


Table D8-7 AMEVTYPER_ELO encoding 





op0 | op1 | CRn | CRm | op2 





11 = |O11 | 1111 | 1010 | <0-4> 























This register can also be accessed through the external memory-mapped interface, offset 
@x400+4n. In this case, it is read-only. 


This register is accessible as follows: 





ELO | EL1 | EL2 | EL3 





RO |RO |RO |RO 
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D8 AArch64 AMU registers 
D8.7 AMEVTYPERn_ELO, Activity Monitor Event Type Register, ELO 
Traps and enables 


If ACTLR_EL2.AMEN is 0, then Non-secure accesses to this register from ELO and EL1 are 
trapped to EL2. 


If ACTLR_EL3.AMEN is 0, then accesses to this register from ELO, EL1, and EL2 are trapped 
to EL3. 


If AMUSERENR_ELO.EN is 0, then accesses to this register from ELO are trapped to EL1. 





100798 _0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights D8-493 
reserved. 
Non-Confidential 


D8 AArch64 AMU registers 
D8.7 AMEVTYPERn_ELDO, Activity Monitor Event Type Register, ELO 
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Chapter D9 
ETM registers 


This chapter describes the ETM registers. 


It contains the following sections: 


D9.1 ETM register summary on page D9-497. 


D9.2 TRCACATRn, Address Comparator Access Type Registers 0-7 on page D9-501. 


D9.3 TRCACVRn, Address Comparator Value Registers 0-7 on page D9-503. 
D9.4 TRCAUTHSTATUS, Authentication Status Register on page D9-504. 
D9.5 TRCAUXCTLR, Auxiliary Control Register on page D9-505. 

D9.6 TRCBBCTLR, Branch Broadcast Control Register on page D9-507. 
D9.7 TRCCCCTLR, Cycle Count Control Register on page D9-508. 


D9.8 TRCCIDCCTLRO, Context ID Comparator Control Register 0 on page D9-509. 


D9.9 TRCCIDCVRO, Context ID Comparator Value Register 0 on page D9-510. 
D9.10 TRCCIDRO, ETM Component Identification Register 0 on page D9-511. 
D9.11 TRCCIDR1, ETM Component Identification Register 1 on page D9-512. 
D9.12 TRCCIDR2, ETM Component Identification Register 2 on page D9-513. 
D9.13 TRCCIDR3, ETM Component Identification Register 3 on page D9-514. 
D9.14 TRCCLAIMCLR, Claim Tag Clear Register on page D9-515. 

D9.15 TRCCLAIMSET, Claim Tag Set Register on page D9-516. 

D9.16 TRCCNTCTLRO, Counter Control Register 0 on page D9-517. 

D9.17 TRCCNTCTLR1, Counter Control Register I on page D9-519. 

D9.18 TRCCNTRLDVRn, Counter Reload Value Registers 0-1 on page D9-521. 
D9.19 TRCCNTVRn, Counter Value Registers 0-1 on page D9-522. 

D9.20 TRCCONFIGR, Trace Configuration Register on page D9-523. 

D9.21 TRCDEVAFFO, Device Affinity Register 0 on page D9-526. 

D9.22 TRCDEVAFF1, Device Affinity Register 1 on page D9-528. 

D9.23 TRCDEVARCH, Device Architecture Register on page D9-529. 
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D9-495 


D9 ETM registers 


D9.24 TRCDEVID, Device ID Register on page D9-530. 

D9.25 TRCDEVTYPE, Device Type Register on page D9-531. 

D9.26 TRCEVENTCTLOR, Event Control 0 Register on page D9-532. 

D9.27 TRCEVENTCTLIR, Event Control I Register on page D9-534. 

D9.28 TRCEXTINSELR, External Input Select Register on page D9-535. 

D9.29 TRCIDRO, ID Register 0 on page D9-536. 

D9.30 TRCIDRI, ID Register 1 on page D9-538. 

D9.31 TRCIDR2, ID Register 2 on page D9-539. 

D9.32 TRCIDR3, ID Register 3 on page D9-541. 

D9.33 TRCIDR4, ID Register 4 on page D9-543. 

D9.34 TRCIDRS, ID Register 5 on page D9-545. 

D9.35 TRCIDRS, ID Register 8 on page D9-547. 

D9.36 TRCIDRY, ID Register 9 on page D9-548. 

D9.37 TRCIDR10, ID Register 10 on page D9-549. 

D9.38 TRCIDR1I, ID Register 11 on page D9-550. 

D9.39 TRCIDR12, ID Register 12 on page D9-551. 

D9.40 TRCIDR13, ID Register 13 on page D9-552. 

D9.41 TRCIMSPEC0, IMPLEMENTATION SPECIFIC Register 0 on page D9-553. 
D9.42 TRCITATBIDR, Integration ATB Identification Register on page D9-554. 
D9.43 TRCITCTRL, Integration Mode Control Register on page D9-555. 

D9.44 TRCITIATBINR, Integration Instruction ATB In Register on page D9-556. 
D9.45 TRCITIATBOUTR, Integration Instruction ATB Out Register on page D9-557. 
D9.46 TRCITIDATAR, Integration Instruction ATB Data Register on page D9-558. 
D9.47 TRCLAR, Software Lock Access Register on page D9-559. 

D9.48 TRCLSR, Software Lock Status Register on page D9-560. 

D9.49 TRCCNTVRn, Counter Value Registers 0-1 on page D9-561. 

D9.50 TRCOSLAR, OS Lock Access Register on page D9-562. 

D9.51 TRCOSLSR, OS Lock Status Register on page D9-563. 

D9.52 TRCPDCR, Power Down Control Register on page D9-564. 

D9.53 TRCPDSR, Power Down Status Register on page D9-565. 

D9.54 TRCPIDRO, ETM Peripheral Identification Register 0 on page D9-566. 
D9.55 TRCPIDRI, ETM Peripheral Identification Register 1 on page D9-567. 
D9.56 TRCPIDR2, ETM Peripheral Identification Register 2 on page D9-568. 
D9.57 TRCPIDR3, ETM Peripheral Identification Register 3 on page D9-569. 
D9.58 TRCPIDR4, ETM Peripheral Identification Register 4 on page D9-570. 
D9.59 TRCPIDRn, ETM Peripheral Identification Registers 5-7 on page D9-571. 
D9.60 TRCPRGCTLR, Programming Control Register on page D9-572. 

D9.61 TRCRSCTLRn, Resource Selection Control Registers 2-16 on page D9-573. 
D9.62 TRCSEQEVRn, Sequencer State Transition Control Registers 0-2 on page D9-574. 
D9.63 TRCSEORSTEVR, Sequencer Reset Control Register on page D9-576. 
D9.64 TRCSEQSTR, Sequencer State Register on page D9-577. 

D9.65 TRCSSCCRO, Single-Shot Comparator Control Register 0 on page D9-578. 
D9.66 TRCSSCSRO, Single-Shot Comparator Status Register 0 on page D9-579. 
D9.67 TRCSTALLCTLR, Stall Control Register on page D9-580. 

D9.68 TRCSTATR, Status Register on page D9-581. 

D9.69 TRCSYNCPR, Synchronization Period Register on page D9-582. 

D9.70 TRCTRACEIDR, Trace ID Register on page D9-583. 

D9.71 TRCTSCTLR, Global Timestamp Control Register on page D9-584. 

D9.72 TRCVICTLR, ViewInst Main Control Register on page D9-585. 

D9.73 TRCVHECTLR, ViewInst Include-Exclude Control Register on page D9-587. 
D9.74 TRCVISSCTLR, ViewInst Start-Stop Control Register on page D9-588. 
D9.75 TRCVMIDCVRO, VMID Comparator Value Register 0 on page D9-589. 
D9.76 TRCVMIDCCTLRO, Virtual context identifier Comparator Control Register 0 on page D9-590. 
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D9 ETM registers 
D9.1 ETM register summary 


































































































D9.1 ETM register summary 
This section summarizes the ETM trace unit registers. 
All ETM trace unit registers are 32-bit wide. The description of each register includes its offset from a 
base address. The base address is defined by the system integrator when placing the ETM trace unit in 
the Debug-APB memory map. 
The following table lists all of the ETM trace unit registers. 
Table D9-1 ETM trace unit register summary 
Offset Name Type | Reset Description 
@x004 TRCPRGCTLR RW | 0x00000088 | D9.60 TRCPRGCTLR, Programming Control Register on page D9-572 
@x0OC TRCSTATR RO | 0x@00000@3 | D9.68 TRCSTATR, Status Register on page D9-581 
0x010 TRCCONFIGR RW |UNK D9.20 TRCCONFIGR, Trace Configuration Register on page D9-523 
@x018 TRCAUXCTLR RW | exeeee0eeas | D9.5 TRCAUXCTLR, Auxiliary Control Register on page D9-505 
@x020 TRCEVENTCTLOR | RW | UNK D9.26 TRCEVENTCTLOR, Event Control 0 Register on page D9-532 
0x024 TRCEVENTCTLIR | RW | UNK D9.27 TRCEVENTCTLIR, Event Control I Register on page D9-534 
@xO2C TRCSTALLCTLR |RW |UNK D9.67 TRCSTALLCTLR, Stall Control Register on page D9-580 
0x030 TRCTSCTLR RW |UNK D9.71 TRCTSCTLR, Global Timestamp Control Register 
on page D9-584 
@x034 TRCSYNCPR RW |UNK D9.69 TRCSYNCPR, Synchronization Period Register on page D9-582 
0x038 TRCCCCTLR RW |UNK D9.7 TRCCCCTLR, Cycle Count Control Register on page D9-508 
@x03C TRCBBCTLR RW |UNK D9.6 TRCBBCTLR, Branch Broadcast Control Register on page D9-507 
@x040 TRCTRACEIDR RW |UNK D9.70 TRCTRACEIDR, Trace ID Register on page D9-583 
0x080 TRCVICTLR RW |UNK D9.72 TRCVICTLR, ViewInst Main Control Register on page D9-585 
Q@x084 TRCVIIECTLR RW |UNK D9.73 TRCVIECTLR, ViewInst Include-Exclude Control Register 
on page D9-587 
0x088 TRCVISSCTLR RW |UNK D9.74 TRCVISSCTLR, ViewInst Start-Stop Control Register 
on page D9-588 
@x100 TRCSEQEVRO RW |UNK D9.62 TRCSEQEVRn, Sequencer State Transition Control Registers 0-2 
on page D9-574 
0x104 TRCSEQEVRI RW |UNK D9.62 TRCSEQEVRn, Sequencer State Transition Control Registers 0-2 
on page D9-574 
0x108 TRCSEQEVR2 RW |UNK D9.62 TRCSEQEVRn, Sequencer State Transition Control Registers 0-2 
on page D9-574 
@x118 TRCSEQRSTEVR | RW |UNK D9.63 TRCSEQRSTEVR, Sequencer Reset Control Register 
on page D9-576 
@x11C TRCSEQSTR RW |UNK D9.64 TRCSEQSTR, Sequencer State Register on page D9-577 
0x120 TRCEXTINSELR |RW_ |UNK D9.28 TRCEXTINSELR, External Input Select Register on page D9-535 
@x140 TRCCNTRLDVRO |RW | UNK D9.18 TRCCNTRLDVRn, Counter Reload Value Registers 0-1 
on page D9-521 
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D9 ETM registers 
D9.1 ETM register summary 


Table D9-1 ETM trace unit register summary (continued) 





































































































Offset Name Type | Reset Description 
@x144 TRCCNTRLDVRI |RW_ | UNK D9.18 TRCCNTRLDVRn, Counter Reload Value Registers 0-1 
on page D9-521 
@x150 TRCCNTCTLRO RW |UNK D9.16 TRCCNTCTLRO, Counter Control Register 0 on page D9-517 
@x154 TRCCNTCTLR1 RW |UNK D9.17 TRCCNTCTLRI, Counter Control Register 1 on page D9-519 
0x160 TRCCNTVRO RW |UNK D9.19 TRCCNTVRn, Counter Value Registers 0-1 on page D9-522 
0x164 TRCCNTVRI RW |UNK D9.19 TRCCNTVRn, Counter Value Registers 0-1 on page D9-522 
@x180 TRCIDR8 RO | gxeegeeeees | D9.35 TRCIDRS, ID Register § on page D9-547 
@x184 TRCIDR9 RO | gxeegeeeees | 29.36 TRCIDRY, ID Register 9 on page D9-548 
@x188 TRCIDR10 RO | gxeeeee9es | 29.37 TRCIDR10, ID Register 10 on page D9-549 
@x18C TRCIDR11 RO | @xeeeee9es | D9.38 TRCIDRII, ID Register 1] on page D9-550 
@x190 TRCIDR12 RO | gxegeeee9es | D9.39 TRCIDR12, ID Register 12 on page D9-551 
@x194 TRCIDR13 RO | @xeeee0e9es | D9.40 TRCIDR13, ID Register 13 on page D9-552 
@x1Ce TRCIMSPECO RW | exeeeee9es | D9.4/ TRCIMSPECO, IMPLEMENTATION SPECIFIC Register 0 
on page D9-553 
@x1E@ TRCIDRO RO | @x28ee@eEA1 | 9.29 TRCIDRO, ID Register 0 on page D9-536 
@x1E4 TRCIDR1 RO | @x4100F423 | D9.30 TRCIDRI, ID Register 1 on page D9-538 
@x1E8 TRCIDR2 RO | 9@x29001088 | D9.3/ TRCIDR2, ID Register 2 on page D9-539 
@x1EC TRCIDR3 RO D9.32 TRCIDR3, ID Register 3 on page D9-541 
0x017B0100 
@x1F@ TRCIDR4 RO | @x111700@e4 | D9.33 TRCIDR4, ID Register 4 on page D9-543 
@x1F4 TRCIDRS RO | @x2847e89D | D9.34 TRCIDRS, ID Register 5 on page D9-545 
@x200 TRCRSCTLRn RW |UNK D9.61 TRCRSCTLRn, Resource Selection Control Registers 2-16 
on page D9-573, n is 2, 15 
Qx280 TRCSSCCRO RW |UNK D9.65 TRCSSCCRO, Single-Shot Comparator Control Register 0 
on page D9-578 
@x2A0 TRCSSCSRO RW |UNK D9.66 TRCSSCSRO, Single-Shot Comparator Status Register 0 
on page D9-579 
0x300 TRCOSLAR WO_ | 0x00000001 | DY.50 TRCOSLAR, OS Lock Access Register on page D9-562 
0x304 TRCOSLSR RO | 0@x@@802@@QA | DY.57 TRCOSLSR, OS Lock Status Register on page D9-563 
@x310 TRCPDCR RW _| 0x@0@00008O | DY.52 TRCPDCR, Power Down Control Register on page D9-564 
@x314 TRCPDSR RO | 0x@0000023 | D9.53 TRCPDSR, Power Down Status Register on page D9-565 
0x400 TRCACVRn RW |UNK D9.3 TRCACVRn, Address Comparator Value Registers 0-7 











on page D9-503 
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D9-498 


D9 ETM registers 
D9.1 ETM register summary 


Table D9-1 ETM trace unit register summary (continued) 














































































































Offset Name Type | Reset Description 
0x480 TRCACATRn RW |UNK D9.2 TRCACATRn, Address Comparator Access Type Registers 0-7 
on page D9-501 
@x600 TRCCIDCVRO RW |UNK D9.9 TRCCIDCVRO, Context ID Comparator Value Register 0 
on page D9-510 
@x640 TRCVMIDCVRO RW |UNK D9.75 TRCVMIDCVRO, VMID Comparator Value Register 0 
on page D9-589 
Qx680 TRCCIDCCTLRO |RW |UNK D9.8 TRCCIDCCTLRO, Context ID Comparator Control Register 0 
on page D9-509 
0x688 TRCVMIDCCTRLO | RW | UNK D9.76 TRCVMIDCCTLRO, Virtual context identifier Comparator 
Control Register 0 on page D9-590 
@xEE4 TRCITATBIDR RW |UNK D9.42 TRCITATBIDR, Integration ATB Identification Register 
on page D9-554 
@xEEC TRCITIDATAR WO |UNK D9.46 TRCITIDATAR, Integration Instruction ATB Data Register 
on page D9-558 
@xEF4 TRCITIATBINR RO |UNK D9.44 TRCITIATBINR, Integration Instruction ATB In Register 
on page D9-556 
@xEFC TRCITIATBOUTR |WO |UNK D9.45 TRCITIATBOUTR, Integration Instruction ATB Out Register 
on page D9-557 
OxFeO TRCITCTRL RW _ | exeeeeeeas | D9.43 TRCITCTRL, Integration Mode Control Register on page D9-555 
OxFA@ TRCCLAIMSET RW |UNK D9.15 TRCCLAIMSET, Claim Tag Set Register on page D9-516 
@xFA4 TRCCLAIMCLR RW _ | exeeeeeees | D9.14 TRCCLAIMCLR, Claim Tag Clear Register on page D9-515 
@xFA8 TRCDEVAFFO RO |UNK D9.21 TRCDEVAFFO, Device Affinity Register 0 on page D9-526 
@xFAC TRCDEVAFF 1 RO |UNK D9.22 TRCDEVAFF'1, Device Affinity Register 1 on page D9-528 
OxFBO TRCLAR WO |UNK D9.47 TRCLAR, Software Lock Access Register on page D9-559 
OxFB4 TRCLSR RO _ | 0x00000088 | DY.48 TRCLSR, Software Lock Status Register on page D9-560 
OxFB8 TRCAUTHSTATUS | RO UNK D9.4 TRCAUTHSTATUS, Authentication Status Register 
on page D9-504 
@xFBC TRCDEVARCH RO | 0x47724A13 | D9.23 TRCDEVARCH, Device Architecture Register on page D9-529 
@xFC8 TRCDEVID RO | @xeeee0ee9ed | D9.24 TRCDEVID, Device ID Register on page D9-530 
@xFCC TRCDEVTYPE RO | 0x@0000013 | D9.25 TRCDEVTYPE, Device Type Register on page D9-531 
OxFE@ TRCPIDRO RO_ | exeeeecees | D9.54 TRCPIDRO, ETM Peripheral Identification Register 0 
on page D9-566 
OxFE4 TRCPIDRI1 RO | gxeeeeeesp | 29.55 TRCPIDRI, ETM Peripheral Identification Register 1 
on page D9-567 
OxFE8 TRCPIDR2 RO | @xeeeeeees | D9.56 TRCPIDR2, ETM Peripheral Identification Register 2 
on page D9-568 
@xFEC TRCPIDR3 RO _ | exeeeeeeee | D9.57 TRCPIDR3, ETM Peripheral Identification Register 3 











on page D9-569 
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D9 ETM registers 
D9.1 ETM register summary 


Table D9-1 ETM trace unit register summary (continued) 


























Offset Name Type | Reset Description 

@xFD@ TRCPIDR4 RO _ | exeeee0eees | D9.58 TRCPIDR4, ETM Peripheral Identification Register 4 
on page D9-570 

@xFD4-@xFDC | TRCPIDRn RO | 0x00000088 | DY.59 TRCPIDRn, ETM Peripheral Identification Registers 5-7 
on page D9-571 

OxFFO TRCCIDRO RO _ | gxeeee0e0en | D9.10 TRCCIDRO, ETM Component Identification Register 0 
on page D9-511 

OxFF4 TRCCIDR1 RO | @xeeeeeege | DY.17 TRCCIDRI, ETM Component Identification Register 1 
on page D9-512 

OxFF8 TRCCIDR2 RO_ | exeeee0ees | D9.12 TRCCIDR2, ETM Component Identification Register 2 
on page D9-513 

@xFFC TRCCIDR3 RO_ | gxeeeee0esi | D9.13 TRCCIDR3, ETM Component Identification Register 3 











on page D9-514 
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D9-500 


D9 ETM registers 
D9.2 TRCACATRn, Address Comparator Access Type Registers 0-7 


D9.2 TRCACATRn, Address Comparator Access Type Registers 0-7 
The TRCACATRn control the access for the corresponding address comparators. 


Bit field descriptions 
The TRCACATRn is a 64-bit register. 


63 1615 12 11 8 7 3.2 10 


EXLEVEL_NS— CONTEXTTYPE— 
RESO EXLEVEL_S 


Figure D9-1 TRCACATRno bit assignments 
RESO, [63:16] 
RESO Reserved. 
EXLEVEL _NS, [15:12] 


Each bit controls whether a comparison can occur in Non-secure state for the corresponding 
Exception level. The possible values are: 


7) The trace unit can perform a comparison, in Non-secure state, for Exception level n. 
1 The trace unit does not perform a comparison, in Non-secure state, for Exception level 
n. 


The Exception levels are: 
Bit[12] Exception level 0. 
Bit[13] Exception level 1. 
Bit[14] Exception level 2. 
Bit[15] Always REso. 


EXLEVEL 5S, [11:8] 


Each bit controls whether a comparison can occur in Secure state for the corresponding 
Exception level. The possible values are: 


7) The trace unit can perform a comparison, in Secure state, for Exception level n. 
1 The trace unit does not perform a comparison, in Secure state, for Exception level n. 
The Exception levels are: 
Bit[8] | Exception level 0. 
Bit[9]__ Exception level 1. 
Bit[10] Always REso. 
Bit[11] Exception level 3. 
RESO, [7:4] 
RESO Reserved. 
CONTEXT TYPE, [3:2] 


Controls whether the trace unit performs a Context ID comparison, a VMID comparison, or both 
comparisons: 
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@bee 
@be1 


@b10 


@b11 


TYPE, [1:0] 


D9 ETM registers 
D9.2 TRCACATRn, Address Comparator Access Type Registers 0-7 


The trace unit does not perform a Context ID comparison. 


The trace unit performs a Context ID comparison using the Context ID comparator 
that the CONTEXT field specifies, and signals a match if both the Context ID 
comparator matches and the address comparator match. 


The trace unit performs a VMID comparison using the VMID comparator that the 
CONTEXT field specifies, and signals a match if both the VMID comparator and the 
address comparator match. 


The trace unit performs a Context ID comparison and a VMID comparison using the 
comparators that the CONTEXT field specifies, and signals a match if the Context ID 
comparator matches, the VMID comparator matches, and the address comparator 
matches. 


Type of comparison: 


@bee 


Instruction address, RESO. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCACATR=a can be accessed through the external debug interface, offset 0x480-0x4B8. 





100798_0301_00_en 


Copyright © 2016-2018 Arm Limited or its affiliates. All rights D9-502 
reserved. 
Non-Confidential 


D9 ETM registers 
D9.3 TRCACVRn, Address Comparator Value Registers 0-7 


D9.3 TRCACVRn, Address Comparator Value Registers 0-7 
The TRCACVRn indicate the address for the address comparators. 


Bit field descriptions 
The TRCACVRnh is a 64-bit register. 


63 0 


ADDRESS 


Figure D9-2 TRCACVRnh bit assignments 


ADDRESS, [63:0] 
The address value to compare against. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCACVRn can be accessed through the external debug interface, offset @x4@0-0x43C. 
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D9 ETM registers 
D9.4 TRCAUTHSTATUS, Authentication Status Register 


D9.4 TRCAUTHSTATUS, Authentication Status Register 
The TRCAUTHSTATUS indicates the current level of tracing permitted by the system. 


Bit field descriptions 
The TRCAUTHSTATUS is a 64-bit register. 


31 876543210 


RESO SNID 
SID 
NSNID 


NSID 


Figure D9-3 TRCAUTHSTATUS bit assignments 

RESO, [31:8] 

RESO Reserved. 
SNID, [7:6] 

Secure Non-invasive Debug: 

@b1@ Secure Non-invasive Debug implemented but disabled. 

@b11 Secure Non-invasive Debug implemented and enabled. 
SID, [5:4] 

Secure Invasive Debug: 


@bee = Secure Invasive Debug is not implemented. 


NSNID, [3:2] 
Non-secure Non-invasive Debug: 
@b1@ Non-secure Non-invasive Debug implemented but disabled, NIDEN=0. 
@b11 Non-secure Non-invasive Debug implemented and enabled, NIDEN=1. 
NSID, [1:0] 
Non-secure Invasive Debug: 


@bee@ =Non-secure Invasive Debug is not implemented. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCAUTHSTATUS can be accessed through the external debug interface, offset @xFB8. 





100798 _0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights D9-504 
reserved. 
Non-Confidential 


D9 ETM registers 
D9.5 TRCAUXCTLR, Auxiliary Control Register 


D9.5 TRCAUXCTLR, Auxiliary Control Register 


The TRCAUXCTLR provides IMPLEMENTATION DEFINED configuration and control options. 


Bit field descriptions 


31 876543210 


RESO posanee 
INOVFLOWEN 


FLUSHOVERRIDE 
TSIOVERRIDE 
SYNCOVERRIDE 
FRSYNCOVFLOW 
IDLEACKOVERRIDE 
AFREADYOVERRIDE 














Figure D9-4 TRCAUXCTLR bit assignments 

RESO, [31:8] 

RESO Reserved. 
CIFOVERRIDE, [7] 

Override core interface register repeater clock enable. The possible values are: 

) Core interface clock gate is enabled. 

1 Core interface clock gate is disabled. 
INOVFLOWEN, [6] 


Allow overflows of the core interface buffer, removing any rare impact that the trace unit might 
have on the core's speculation when enabled. The possible values are: 


(2) Core interface buffer overflows are disabled. 


1 Core interface buffer overflows are enabled. 


When this bit is set to 1, the trace start/stop logic might deviate from architecturally-specified 
behavior. 


FLUSHOVERRIDE, [5] 
Override ETM flush behavior. The possible values are: 


e ETM trace unit FIFO is flushed and ETM trace unit enters idle state when DBGEN or 
NIDEN is LOW. 

1 ETM trace unit FIFO is not flushed and ETM trace unit does not enter idle state when 
DBGEN or NIDEN is LOW. 


When this bit is set to 1, the trace unit behavior deviates from architecturally-specified behavior. 
TSIOVERRIDE, [4] 

Override TS packet insertion behavior. The possible values are: 

7) Timestamp packets are inserted into FIFO only when trace activity is LOW. 


1 Timestamp packets are inserted into FIFO irrespective of trace activity. 


SYNCOVERRIDE, [3] 
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D9 ETM registers 
D9.5 TRCAUXCTLR, Auxiliary Control Register 


Override SYNC packet insertion behavior. The possible values are: 


7) SYNC packets are inserted into FIFO only when trace activity is low. 
1 SYNC packets are inserted into FIFO irrespective of trace activity. 


FRSYNCOVFLOW, [2] 


Force overflows to output synchronization packets. The possible values are: 


() No FIFO overflow when SYNC packets are delayed. 
1 Forces FIFO overflow when SYNC packets are delayed. 


When this bit is set to 1, the trace unit behavior deviates from architecturally-specified behavior. 


IDLEACKOVERRIDE, [1] 


Force ETM idle acknowledge. The possible values are: 


7) ETM trace unit idle acknowledge is asserted only when the ETM trace unit is in idle 
state. 

1 ETM trace unit idle acknowledge is asserted irrespective of the ETM trace unit idle 
state. 


When this bit is set to 1, trace unit behavior deviates from architecturally-specified behavior. 


AFREADYOVERRIDE, [0] 
Force assertion of AFREADYM output. The possible values are: 


7) ETM trace unit AFREADYM output is asserted only when the ETM trace unit is in 
idle state or when all the trace bytes in FIFO before a flush request are output. 
1 ETM trace unit AFREADYM output is always asserted HIGH. 


When this bit is set to 1, trace unit behavior deviates from architecturally-specified behavior. 


The TRCAUXCTLR can be accessed through the internal memory-mapped interface and the external 
debug interface, offset @x018. 


Configurations 
Available in all configurations. 
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D9 ETM registers 
D9.6 TRCBBCTLR, Branch Broadcast Control Register 


D9.6 TRCBBCTLR, Branch Broadcast Control Register 


The TRCBBCTLR controls how branch broadcasting behaves, and allows branch broadcasting to be 
enabled for certain memory regions. 


Bit field descriptions 
The TRCAUXCTLR is a 32-bit register. 


31 987 0 
L_MODE 
RESO 


Figure D9-5 TRCBBCTLR bit assignments 
RESO, [31:9] 


RESO Reserved. 


MODE, [8] 
Mode bit: 
7) Exclude mode. Branch broadcasting is not enabled in the address range that RANGE 
defines. 
If RANGE==0 then branch broadcasting is enabled for the entire memory map. 
1 Include mode. Branch broadcasting is enabled in the address range that RANGE 
defines. 
If RANGE==0 then the behavior of the trace unit is CONSTRAINED UNPREDICTABLE. That 
is, the trace unit might or might not consider any instructions to be in a branch 
broadcast region. 
RANGE, [7:0] 


Address range field. 


Selects which address range comparator pairs are in use with branch broadcasting. Each bit 
represents an address range comparator pair, so bit[n] controls the selection of address range 
comparator pair n. If bit[n] is: 

@ The address range that address range comparator pair n defines, is not selected. 

1 The address range that address range comparator pair n defines, is selected. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCBBCTLR can be accessed through the external debug interface, offset @x@3C. 
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D9 ETM registers 
D9.7 TRCCCCTLR, Cycle Count Control Register 


D9.7 TRCCCCTLR, Cycle Count Control Register 
The TRCCCCTLR sets the threshold value for cycle counting. 


Bit field descriptions 
The TRCCCCTLR is a 32-bit register. 


31 12 11 0 


RESO 


Figure D9-6 TRCCCCTLR bit assignments 
RESO, [31:12] 


RESO Reserved. 


THRESHOLD, [11:0] 
Instruction trace cycle count threshold. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé6, for Armv8-A architecture profile. 


The TRCCCCTLR can be accessed through the external debug interface, offset @x@38. 





100798 _0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights D9-508 
reserved. 
Non-Confidential 


D9 ETM registers 
D9.8 TRCCIDCCTLRO, Context ID Comparator Control Register 0 


D9.8 TRCCIDCCTLRO, Context ID Comparator Control Register 0 
The TRCCIDCCTLR0O controls the mask value for the context ID comparators. 


Bit field descriptions 
The TRCCIDCCTLR0O is a 32-bit register. 


31 4 3 0 


RESO 


Figure D9-7 TRCCIDCCTLRO bit assignments 
RESO, [31:4] 
RESO Reserved. 
COMP), [3:0] 


Controls the mask value that the trace unit applies to TRCCIDCVRO. Each bit in this field 
corresponds to a byte in TRCCIDCVRO. When a bit is: 


7) The trace unit includes the relevant byte in TRCCIDCVRO when it performs the 
Context ID comparison. 
1 The trace unit ignores the relevant byte in TRCCIDCVRO when it performs the 


Context ID comparison. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCCIDCCTLRO can be accessed through the external debug interface, offset @x680. 
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D9 ETM registers 
D9.9 TRCCIDCVRO, Context ID Comparator Value Register 0 


D9.9 TRCCIDCVRO, Context ID Comparator Value Register 0 
The TRCCIDCVRO contains a Context ID value. 


Bit field descriptions 
The TRCCIDCVR0O is a 64-bit register. 


63 32 31 0 


Value 


Figure D9-8 TRCCIDCVRO bit assignments 


RESO 


RESO, [63:32] 


RESO Reserved. 


VALUE, [31:0] 


The data value to compare against. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCCIDCVRO can be accessed through the external debug interface, offset @x60ee. 
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D9 ETM registers 
D9.10 TRCCIDRO, ETM Component Identification Register 0 


D9.10 TRCCIDRO, ETM Component Identification Register 0 
The TRCCIDR0O provides information to identify a trace component. 


Bit field descriptions 
The TRCCIDR0O is a 32-bit register. 


31 8 7 0 


RESO 


Figure D9-9 TRCCIDRO bit assignments 
RESO, [31:8] 
RESO Reserved. 
PRMBL_ 0, [7:0] 
@x@D Preamble byte 0. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCCIDRO can be accessed through the external debug interface, offset @xFFO. 
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D9 ETM registers 
D9.11 TRCCIDR1, ETM Component Identification Register 1 


D9.11 TRCCIDR1, ETM Component Identification Register 1 


The TRCCIDR1 provides information to identify a trace component. 


Bit field descriptions 
The TRCCIDR1 is a 32-bit register. 


31 8 7 4 3 0 
RESO 


Figure D9-10 TRCCIDR1 bit assignments 
RESO, [31:8] 
RESO Reserved. 
CLASS, [7:4] 
@x9 Debug component. 
PRMBL._1, [3:0] 
@x® Preamble byte 1. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé, for Armv8-A architecture profile. 


The TRCCIDRI can be accessed through the external debug interface, offset @xFF4. 
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D9 ETM registers 
D9.12 TRCCIDR2, ETM Component Identification Register 2 


D9.12 TRCCIDR2, ETM Component Identification Register 2 
The TRCCIDR2 provides information to identify a CTI component. 


Bit field descriptions 
The TRCCIDR2 is a 32-bit register. 


31 8 7 0 


RESO 


Figure D9-11 TRCCIDR2 bit assignments 
RESO, [31:8] 
RESO Reserved. 
PRMBL 2, [7:0] 
@x@5 ~~ Preamble byte 2. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCCIDR2 can be accessed through the external debug interface, offset @xFF8. 
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D9 ETM registers 
D9.13 TRCCIDR3, ETM Component Identification Register 3 


D9.13 TRCCIDR3, ETM Component Identification Register 3 
The TRCCIDR3 provides information to identify a trace component. 


Bit field descriptions 
The TRCCIDR3 is a 32-bit register. 


31 8 7 0 


RESO 


Figure D9-12 TRCCIDR3 bit assignments 
RESO, [31:8] 
RESO Reserved. 
PRMBL_ 3, [7:0] 
@xB1 Preamble byte 3. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCCIDR3 can be accessed through the external debug interface, offset @xFFC. 
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D9 ETM registers 
D9.14 TRCCLAIMCLR, Claim Tag Clear Register 


D9.14 TRCCLAIMCLR, Claim Tag Clear Register 
The TRCCLAIMCLR clears bits in the claim tag and determines the current value of the claim tag. 


Bit field descriptions 
The TRCCLAIMCLR is a 32-bit register. 


Figure D9-13 TRCCLAIMCLR bit assignments 
RESO, [31:4] 


RESO Reserved. 


CLR, [3:0] 
On reads, for each bit: 
) Claim tag bit is not set. 
1 Claim tag bit is set. 


On writes, for each bit: 
(4) Has no effect. 
1 Clears the relevant bit of the claim tag. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCCLAIMCLR can be accessed through the external debug interface, offset @xFA4. 
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D9 ETM registers 
D9.15 TRCCLAIMSET, Claim Tag Set Register 


D9.15 TRCCLAIMSET, Claim Tag Set Register 
The TRCCLAIMSET sets bits in the claim tag and determines the number of claim tag bits implemented. 


Bit field descriptions 
The TRCCLAIMSET is a 32-bit register. 


Figure D9-14 TRCCLAIMSET bit assignments 
RESO, [31:4] 


RESO Reserved. 


SET, [3:0] 
On reads, for each bit: 
@ Claim tag bit is not implemented. 
1 Claim tag bit is implemented. 


On writes, for each bit: 
(4) Has no effect. 
1 Sets the relevant bit of the claim tag. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCCLAIMSET can be accessed through the external debug interface, offset @xFA@. 
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D9 ETM registers 
D9.16 TRCCNTCTLRO, Counter Control Register 0 


D9.16 TRCCNTCTLRO, Counter Control Register 0 
The TRCCNTCTLRO controls the counter. 


Bit field descriptions 
The TRCCNTCTLRO is a 32-bit register. 


31 17161514 1211 87 6 
BEDSEL CNTTYPE— 
RESO Se eiegle 


Figure D9-15 TRCCNTCTLRO bit assignments 
RESO, [31:17] 
RESO Reserved. 
RLDSELF, [16] 


Defines whether the counter reloads when it reaches zero: 


) The counter does not reload when it reaches zero. The counter only reloads based on 
RLDTYPE and RLDSEL. 
1 The counter reloads when it reaches zero and the resource selected by CNTTYPE and 


CNTSEL is also active. The counter also reloads based on RLDTYPE and RLDSEL. 


RLDTYPE, [15] 
Selects the resource type for the reload: 
i) Single selected resource. 
1 Boolean combined resource pair. 
RESO, [14:12] 
RESO Reserved. 
RLDSEL, [11:8] 
Selects the resource number, based on the value of RLDTYPE: 
When RLDTYPE is 0, selects a single selected resource from 0-15 defined by bits[3:0]. 
When RLDTYPE is 1, selects a Boolean combined resource pair from 0-7 defined by bits[2:0]. 
CNTTYPE, [7] 


Selects the resource type for the counter: 


7) Single selected resource. 
1 Boolean combined resource pair. 
RESO, [6:4] 


RESO Reserved. 
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D9 ETM registers 
D9.16 TRCCNTCTLRO, Counter Control Register 0 


CNTSEL, [3:0] 
Selects the resource number, based on the value of CNT TYPE: 
When CNTTYPE is 0, selects a single selected resource from 0-15 defined by bits[3:0]. 
When CNTTYPE is 1, selects a Boolean combined resource pair from 0-7 defined by bits[2:0]. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCCNTCTLRO can be accessed through the external debug interface, offset @x159. 
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D9 ETM registers 
D9.17 TRCCNTCTLR1, Counter Control Register 1 


D9.17 TRCCNTCTLR1, Counter Control Register 1 
The TRCCNTCTLRI1 controls the counter. 


Bit field descriptions 
The TRCCNTCTLRI is a 32-bit register. 


31 1817161514 1211 8 7 6 


eNnCHAI = CNTTYPE— 
RESO Ri aa 
RLDTYPE 


Figure D9-16 TRCCNTCTLR1 bit assignments 
RESO, [31:18] 
RESO Reserved. 
CNTCHAIN, [17] 


Defines whether the counter decrements when the counter reloads. This enables two counters to 
be used in combination to provide a larger counter: 


7) The counter operates independently from the counter. The counter only decrements 
based on CNTTYPE and CNTSEL. 
1 The counter decrements when the counter reloads. The counter also decrements when 


the resource selected by CNTTYPE and CNTSEL is active. 


RLDSELE, [16] 


Defines whether the counter reloads when it reaches zero: 


) The counter does not reload when it reaches zero. The counter only reloads based on 
RLDTYPE and RLDSEL. 
1 The counter reloads when it is zero and the resource selected by CNTTYPE and 


CNTSEL is also active. The counter also reloads based on RLDTYPE and RLDSEL. 


RLDTYPE, [15] 
Selects the resource type for the reload: 


@ Single selected resource. 


1 Boolean combined resource pair. 


RESO, [14:12] 

RESO Reserved. 
RLDSEL, [11:8] 

Selects the resource number, based on the value of RLDTYPE: 

When RLDTYPE is 0, selects a single selected resource from 0-15 defined by bits[3:0]. 

When RLDTYPE is 1, selects a Boolean combined resource pair from 0-7 defined by bits[2:0]. 
CNTTYPE, [7] 


Selects the resource type for the counter: 
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D9 ETM registers 
D9.17 TRCCNTCTLR1, Counter Control Register 1 


7) Single selected resource. 
1 Boolean combined resource pair. 
RESO, [6:4] 


RESO Reserved. 


CNTSEL, [3:0] 
Selects the resource number, based on the value of CNT TYPE: 
When CNTTYPE is 0, selects a single selected resource from 0-15 defined by bits[3:0]. 
When CNTTYPE is 1, selects a Boolean combined resource pair from 0-7 defined by bits[2:0]. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCCNTCTLRI can be accessed through the external debug interface, offset @x154. 
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D9 ETM registers 
D9.18 TRCCNTRLDVRn, Counter Reload Value Registers 0-1 


D9.18 TRCCNTRLDVRn, Counter Reload Value Registers 0-1 
The TRCCNTRLDVRn define the reload value for the counter. 


Bit field descriptions 
The TRCCNTRLDVRn is a 32-bit register. 


31 1615 0 


VALUE 


RESO 





Figure D9-17 TRCCNTRLDVRno bit assignments 
RESO, [31:16] 
RESO Reserved. 
VALUE, [15:0] 


Defines the reload value for the counter. This value is loaded into the counter each time the 
reload event occurs. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé6, for Armv8-A architecture profile. 


The TRCCNTRLDVRn registers can be accessed through the external debug interface, offsets: 


TRCCNTRLDVRO 
6x14@. 


TRCCNTRLDVRI 
6x144. 
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D9 ETM registers 
D9.19 TRCCNTVRn, Counter Value Registers 0-1 


D9.19 TRCCNTVRn, Counter Value Registers 0-1 


The TRCCNTVRn contain the current counter value. 


Bit field descriptions 
The TRCCNTVRn is a 32-bit register. 


31 1615 0 


VALUE 


RESO 





Figure D9-18 TRCCNTVRn bit assignments 


RESO, [31:16] 


RESO Reserved. 


VALUE, [15:0] 
Contains the current counter value. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCCNTRLDVRn registers can be accessed through the external debug interface, offsets: 


TRCCNTVRO 
6x16. 


TRCCNTVRI 
6x164. 
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D9 ETM registers 
D9.20 TRCCONFIGR, Trace Configuration Register 


D9.20 TRCCONFIGR, Trace Configuration Register 
The TRCCONFIGR controls the tracing options. 


Bit field descriptions 
The TRCCONFIGR is a 32-bit register. 


18 17 1615 1413 1211 10 876543210 





pv VMID — 
RES1 DA CID 
RESO VMIDOPT CCl 


RS BB 
TS INSTPO 





Figure D9-19 TRCCONFIGR bit assignments 
RESO, [31:18] 


RESO Reserved. 


DV, [17] 
Enables data value tracing. The possible values are: 
() Disables data value tracing. 
1 Enables data value tracing. 

DA, [16] 
Enables data address tracing. The possible values are: 
) Disables data address tracing. 
1 Enables data address tracing. 


VMIDOPT, [15] 


Configures the Virtual context identifier value used by the trace unit, both for trace generation 
and in the Virtual context identifier comparators. The possible values are: 


@be VTTBR_EL2.VMID is used. If the trace unit supports a Virtual context identifier 
larger than the VTTBR_EL2.VMID, the upper unused bits are always zero. If the trace 
unit supports a Virtual context identifier larger than 8 bits and if the VTCR_EL2.VS 
bit forces use of an 8-bit Virtual context identifier, bits [15:8] of the trace unit Virtual 
context identifier are always zero. 


@b1 CONTEXTIDR_EL2 is used. TRCIDR2.VMIDOPT indicates whether this field is 
implemented. 
QE, [14:13] 
Enables Q element. The possible values are: 


@bee@ Qelements are disabled. 


@b@1 Q elements with instruction counts are disabled. Q elements without instruction counts 
are disabled. 


@b10 ~— Reserved. 


@b11 Qelements with and without instruction counts are enabled. 
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RS, [12] 


TS, [11] 


D9 ETM registers 
D9.20 TRCCONFIGR, Trace Configuration Register 


Enables the return stack. The possible values are: 

@ Disables the return stack. 

1 Enables the return stack. 

Enables global timestamp tracing. The possible values are: 
7) Disables global timestamp tracing. 

1 Enables global timestamp tracing. 


COND, [10:8] 


Enables conditional instruction tracing. The possible values are: 


@beee Conditional instruction tracing is disabled. 

@be@01 Conditional load instructions are traced. 

@be@1@ Conditional store instructions are traced. 

@b@11 Conditional load and store instructions are traced. 


@b111 All conditional instructions are traced. 


VMID, [7] 
Enables VMID tracing. The possible values are: 
() Disables VMID tracing. 
1 Enables VMID tracing. 
CID, [6] 
Enables context ID tracing. The possible values are: 
() Disables context ID tracing. 
1 Enables context ID tracing. 
RESO, [5] 


CCL, [4] 


BB, [3] 


RESO Reserved. 


Enables cycle counting instruction trace. The possible values are: 
7) Disables cycle counting instruction trace. 
1 Enables cycle counting instruction trace. 


Enables branch broadcast mode. The possible values are: 


(7) Disables branch broadcast mode. 


1 Enables branch broadcast mode. 


INSTPO, [2:1] 


Controls whether load and store instructions are traced as PO instructions. The possible values 
are: 


@bee ~— Load and store instructions are not traced as PO instructions. 


@b@1 ~—Load instructions are traced as PO instructions. 
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D9 ETM registers 
D9.20 TRCCONFIGR, Trace Configuration Register 


@b10 Store instructions are traced as PO instructions. 
@b11 Load and store instructions are traced as PO instructions. 


RESI, [0] 


RES1 Reserved. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé, for Armv8-A architecture profile. 


The TRCCONFIGR can be accessed through the external debug interface, offset @x@10. 
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D9 ETM registers 
D9.21 TRCDEVAFFO, Device Affinity Register 0 


D9.21 TRCDEVAFFO, Device Affinity Register 0 


The TRCDEVAFFO0 provides an additional core identification mechanism for scheduling purposes in a 
cluster. TRCDEVAFFO is a read-only copy of MPIDR accessible from the external debug interface. 


Bit field descriptions 
The TRCDEVAFFO is a 32-bit register. 


31 30 29 25 24 23 16.15 8 7 0 
mT — 
RES1 
RESO 


Figure D9-20 TRCDEVAFFO bit assignments 
RES1, [31] 
RESI Reserved. 
U, [30] 
Indicates a single core system, as distinct from core 0 in a cluster. This value is: 


7) Core is part of a multiprocessor system. This is the value for implementations with 
more than one core, and for implementations with an ACE or CHI master interface. 


1 Core is part of a uniprocessor system. This is the value for single core 
implementations with an AXI master interface. 


RESO, [29:25] 
RESO Reserved. 
MT, [24] 


Indicates whether the lowest level of affinity consists of logical cores that are implemented 
using a multithreading type approach. This value is: 


() Performance of cores at the lowest affinity level is largely independent. 
Aff2, [23:16] 

Affinity level 2. Second highest level affinity field. 

Indicates the value read in the CLUSTERIDAFF2 configuration signal. 
Aff1, [15:8] 

Affinity level 1. Third highest level affinity field. 

Indicates the value read in the CLUSTERIDAFF1 configuration signal. 
Aff0, [7:0] 

Affinity level 0. Lowest level affinity field. 


Indicates the core number in the Cortex-A76 core. The possible values are: 





@xe A cluster with one core only. 
@x®, @x1 A cluster with two cores. 
@x®, @x1, @x2 A cluster with three cores. 
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D9 ETM registers 
D9.21 TRCDEVAFFO, Device Affinity Register 0 


@x®, @x1, @x2, @x3 A cluster with four cores. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCDEVAFFO0 can be accessed through the external debug interface, offset @xFA8. 
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D9 ETM registers 
D9.22 TRCDEVAFF1, Device Affinity Register 1 


D9.22 TRCDEVAFF1, Device Affinity Register 1 


The TRCDEVAFF1 is a read-only copy of MPIDR_EL1[63:32] as seen from EL3, unaffected by 
VMPIDR_ EL2. 
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D9 ETM registers 
D9.23 TRCDEVARCH, Device Architecture Register 


TRCDEVARCH, Device Architecture Register 


The TRCDEVARCH identifies the ETM trace unit as an ETMv4 component. 


Bit field descriptions 
The TRCDEVARCH is a 32-bit register. 
31 21 2019 16:15 


0 


ARCHITECT i REVISION ARCHID 


PRESENT! 


Figure D9-21 TRCDEVARCH bit assignments 


ARCHITECT, [31:21] 

Defines the architect of the component: 

x4 Arm JEP continuation. 

@x3B Arm JEP 106 code. 
PRESENT, [20] 

Indicates the presence of this register: 

@b1 Register is present. 
REVISION, [19:16] 

Architecture revision: 

@xe2 ~=©Architecture revision 2. 
ARCHID, [15:0] 

Architecture ID: 


@x4A13 ETMv4 component. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé, for Armv8-A architecture profile. 


The TRCDEVARCH can be accessed through the external debug interface, offset @xFBC. 
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D9 ETM registers 
D9.24 TRCDEVID, Device ID Register 


D9.24  TRCDEVID, Device ID Register 
The TRCDEVID indicates the capabilities of the ETM trace unit. 


Bit field descriptions 
The TRCDEVID is a 32-bit register. 


31 0 


DEVID 


Figure D9-22 TRCDEVID bit assignments 


DEVID, [31:0] 
RAZ. There are no component-defined capabilities. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCDEVID can be accessed through the external debug interface, offset @xFC8. 
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D9 ETM registers 
D9.25 TRCDEVTYPE, Device Type Register 


TRCDEVTYPE, Device Type Register 


The TRCDEVTYPE indicates the type of the component. 


Bit field descriptions 
The TRCDEVTYPE is a 32-bit register. 


31 8 7 4 3 0 


RESO 


Figure D9-23 TRCDEVTYPE bit assignments 

RESO, [31:8] 

RESO Reserved. 
SUB, [7:4] 

The sub-type of the component: 

@beee1 Core trace. 
MAJOR, [3:0] 

The main type of the component: 


@be@0@11 Trace source. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé6, for Armv8-A architecture profile. 


The TRCDEVTYPE can be accessed through the external debug interface, offset @xFCC. 
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D9 ETM registers 
D9.26 TRCEVENTCTLOR, Event Control 0 Register 


D9.26 TRCEVENTCTLOR, Event Control 0 Register 


The TRCEVENTCTLOR controls the tracing of events in the trace stream. The events also drive the 
external outputs from the ETM trace unit. The events are selected from the Resource Selectors. 


Bit field descriptions 
The TRCEVENTCTLOR is a 32-bit register. 


3130 2827 242322 2019 161514 1211 8 7 6 4 3 0 





L_TYPE3 TYPE2— TYPE1 —! TYPEO —! 


RESO 


Figure D9-24 TRCEVENTCTLOR bit assignments 

TYPE3, [31] 

Selects the resource type for trace event 3: 

) Single selected resource. 

1 Boolean combined resource pair. 
RESO, [30:28] 

RESO Reserved. 
SEL3, [27:24] 

Selects the resource number, based on the value of TYPE3: 

When TYPE3 is 0, selects a single selected resource from 0-15 defined by bits[3:0]. 

When TYPE3 is 1, selects a Boolean combined resource pair from 0-7 defined by bits[2:0]. 
TYPE2, [23] 

Selects the resource type for trace event 2: 

7) Single selected resource. 

1 Boolean combined resource pair. 
RESO, [22:20] 

RESO Reserved. 
SEL2, [19:16] 

Selects the resource number, based on the value of TYPE2: 

When TYPE2 is 0, selects a single selected resource from 0-15 defined by bits[3:0]. 

When TYPE2 is 1, selects a Boolean combined resource pair from 0-7 defined by bits[2:0]. 
TYPE1, [15] 

Selects the resource type for trace event 1: 

) Single selected resource. 


1 Boolean combined resource pair. 


RESO, [14:12] 
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D9 ETM registers 
D9.26 TRCEVENTCTLOR, Event Control 0 Register 


RESO Reserved. 
SEL1, [11:8] 
Selects the resource number, based on the value of TYPE1: 
When TYPE] is 0, selects a single selected resource from 0-15 defined by bits[3:0]. 
When TYPE] is 1, selects a Boolean combined resource pair from 0-7 defined by bits[2:0]. 


TYPEO, [7] 
Selects the resource type for trace event 0: 
7) Single selected resource. 
1 Boolean combined resource pair. 
RESO, [6:4] 


RESO Reserved. 
SELO, [3:0] 
Selects the resource number, based on the value of TYPEO: 
When TYPEO is 0, selects a single selected resource from 0-15 defined by bits[3:0]. 
When TYPEO is 1, selects a Boolean combined resource pair from 0-7 defined by bits[2:0]. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCEVENTCTLOR can be accessed through the external debug interface, offset @x@2e. 
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D9 ETM registers 
D9.27 TRCEVENTCTL1R, Event Control 1 Register 


D9.27. TRCEVENTCTL1R, Event Control 1 Register 
The TRCEVENTCTLIR controls the behavior of the events that TRCEVENTCTLOR selects. 


Bit field descriptions 
The TRCEVENTCTLIR is a 32-bit register. 


31 131211 10 8 7 5 4 3 0 
RESO ATB 
LPOVERRIDE 


Figure D9-25 TRCEVENTCTL1R bit assignments 
RESO, [31:13] 
RESO Reserved. 
LPOVERRIDE, [12] 
Low-power state behavior override: 


7) Low-power state behavior unaffected. 


1 Low-power state behavior overridden. The resources and Event trace generation are 
unaffected by entry to a low-power state. 


ATB, [11] 
ATB trigger enable: 
) ATB trigger disabled. 
1 ATB trigger enabled. 
RESO, [10:4] 


RESO Reserved. 
EN, [3:0] 


One bit per event, to enable generation of an event element in the instruction trace stream when 
the selected event occurs: 


e Event does not cause an event element. 


alt Event causes an event element. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCEVENTCTLIR can be accessed through the external debug interface, offset @xe24. 
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D9 ETM registers 
D9.28 TRCEXTINSELR, External Input Select Register 


D9.28 TRCEXTINSELR, External Input Select Register 


The TRCEXTINSELR controls the selectors that choose an external input as a resource in the ETM trace 
unit. You can use the Resource Selectors to access these external input resources. 


Bit field descriptions 


29 28 2423 2120 1615 1312 


RESO 


Figure D9-26 TRCEXTINSELR bit assignments 
RESO, [31:29] 


RESO Reserved. 


SEL3, [28:24] 
Selects an event from the external input bus for External Input Resource 3. 


RESO, [23:21] 


RESO Reserved. 


SEL2, [20:16] 
Selects an event from the external input bus for External Input Resource 2. 


RESO, [15:13] 


RESO Reserved. 


SEL, [12:8] 
Selects an event from the external input bus for External Input Resource 1. 


RESO, [7:5] 


RESO Reserved. 


SELO, [4:0] 
Selects an event from the external input bus for External Input Resource 0. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCEXTINSELR can be accessed through the external debug interface, offset @x120. 
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D9 ETM registers 
D9.29 TRCIDRO, ID Register 0 


TRCIDRO, ID Register 0 


The TRCIDRO returns the tracing capabilities of the ETM trace unit. 


Bit field descriptions 
The TRCIDRO is a 32-bit register. 


31 30 29 28 24 23 17161514131211109 8 7 65 43 2 1 0 











L COMMOPT QSUPP 7 | |___ |NSTPO 
QFILT TRCDATA 
CONDTYPE TRCBB 
RES1 NUMEVENT TRCCOND 
RESO RETSTACK TRCCCI 


Figure D9-27 TRCIDRO bit assignments 

RESO, [31:30] 

RESO Reserved. 
COMMOPT, [29] 

Indicates the meaning of the commit field in some packets: 

1 Commit mode 1. 
TSSIZE, [28:24] 

Global timestamp size field: 

@be10ee@ Implementation supports a maximum global timestamp of 64 bits. 
RESO, [23:17] 

RESO Reserved. 
QSUPP, [16:15] 

Indicates Q element support: 

e@bee Q elements not supported. 
QFILT, [14] 

Indicates Q element filtering support: 

@be Q element filtering not supported. 
CONDTYPE, [13:12] 

Indicates how conditional results are traced: 

e@bee Conditional trace not supported. 
NUMEVENT, [11:10] 

Number of events supported in the trace, minus 1: 


@b11 Four events supported. 


RETSTACK, [9] 
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D9 ETM registers 
D9.29 TRCIDRO, ID Register 0 


Return stack support: 

1 Return stack implemented. 
RESO, [8] 

RESO Reserved. 


TRCCCI, [7] 

Support for cycle counting in the instruction trace: 

1 Cycle counting in the instruction trace is implemented. 
TRCCOND, [6] 

Support for conditional instruction tracing: 

) Conditional instruction tracing is not supported. 
TRCBB, [5] 

Support for branch broadcast tracing: 

1 Branch broadcast tracing is implemented. 
TRCDATA, [4:3] 

Conditional tracing field: 

@bee Tracing of data addresses and data values is not implemented. 
INSTPO, [2:1] 

PO tracing support field: 


e@bee Tracing of load and store instructions as PO elements is not supported. 
RES1, [0] 
RESI Reserved. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé, for Armv8-A architecture profile. 


The TRCIDRO can be accessed through the external debug interface, offset @x1E@. 
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D9 ETM registers 
D9.30 TRCIDR1, ID Register 1 


D9.30 TRCIDR1, ID Register 1 
The TRCIDR1 returns the base architecture of the trace unit. 


Bit field descriptions 
The TRCIDRI1 is a 32-bit register. 


31 24 23 1615 12 11 8 


7 4 3 0 
TRCARCHMAg — 
RES1 TRCARCHMIN 


RESO 


Figure D9-28 TRCIDR1 bit assignments 
DESIGNER, [31:24] 
Indicates which company designed the trace unit: 
@x41 = Arm. 
RESO, [23:16] 
RESO Reserved. 
RES1, [15:12] 
RESI Reserved. 
TRCARCHMAG, [11:8] 
Major trace unit architecture version number: 
@be10e0 ETMv4. 
TRCARCHMIN, [7:4] 
Minor trace unit architecture version number: 
@x2 ETMv4.2 
REVISION, [3:0] 
Trace unit implementation revision number: 


3 ETM revision. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCIDRI can be accessed through the external debug interface, offset @x1E4. 
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D9 ETM registers 
D9.31 TRCIDR2, ID Register 2 


TRCIDR2, ID Register 2 


The TRCIDR2 returns the maximum size of six parameters in the trace unit. 


The parameters are: 

¢ Cycle counter. 

¢ Data value. 

¢ Data address. 

« VMID. 

¢ Context ID. 

¢ Instruction address. 


Bit field descriptions 
The TRCIDR2 is a 32-bit register. 


31 29 28 25 24 20 19 15 14 10 9 5 4 0 
ii CCSIZE DVSIZE DASIZE VMIDSIZE CIDSIZE IASIZE 





VMIDOPT 


RESO 


Figure D9-29 TRCIDR2 bit assignments 
RESO, [31] 
RESO Reserved. 
VMIDOPT, [30:29] 
Indicates the options for observing the Virtual context identifier: 
ex1 VMIDOPT is implemented. 
CCSIZE, [28:25] 
Size of the cycle counter in bits minus 12: 
exe The cycle counter is 12 bits in length. 
DVSIZE, [24:20] 
Data value size in bytes: 
@xee@ _— Data value tracing is not implemented. 
DASIZE, [19:15] 
Data address size in bytes: 
@xe@ _— Data address tracing is not implemented. 
VMIDSIZE, [14:10] 
Virtual Machine ID size: 
@x4 Maximum of 32-bit Virtual Machine ID size. 
CIDSIZE, [9:5] 


Context ID size in bytes: 
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D9 ETM registers 
D9.31 TRCIDR2, ID Register 2 


0x4 Maximum of 32-bit Context ID size. 
IASIZE, [4:0] 


Instruction address size in bytes: 


@x8 Maximum of 64-bit address size. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCIDR2 can be accessed through the external debug interface, offset @x1E8. 
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D9 ETM registers 
D9.32 TRCIDR3, ID Register 3 


D9.32 TRCIDR3, ID Register 3 
The TRCIDR3 indicates: 


¢« Whether TRCVICTLR is supported. 

¢ The number of cores available for tracing. 

¢ Ifan Exception level supports instruction tracing. 

¢ The minimum threshold value for instruction trace cycle counting. 

¢ Whether the synchronization period is fixed. 

¢ Whether TRCSTALLCTLR is supported and if so whether it supports trace overflow prevention and 
supports stall control of the core. 


Bit field descriptions 
The TRCIDR3 is a 32-bit register. 


3130 28 27 26 25 24 23 20 19 1615 12 11 5 4 0 


EXLEVEL_S 
EXLEVEL_NS 
TRCERR 
SYNCPR 





STALLCTL 
SYSSTALL 
NUMPROC 
NOOVERFLOW 




















RESO 


Figure D9-30 TRCIDR3 bit assignments 

NOOVERFLOW, [31] 

Indicates whether TRCSTALLCTLR.NOOVERFLOW is implemented: 

() TRCSTALLCTLR.NOOVERFLOW is not implemented. 
NUMPROC, [30:28] 

Indicates the number of cores available for tracing: 

@beee = The trace unit can trace one core, ETM trace unit sharing not supported. 
SYSSTALL, [27] 

Indicates whether stall control is implemented: 

1 The system supports core stall control. 
STALLCTL, [26] 

Indicates whether TRCSTALLCTLR is implemented: 

1 TRCSTALLCTLR is implemented. 


This field is used in conjunction with SYSSTALL. 
SYNCPR, [25] 


Indicates whether there is a fixed synchronization period: 
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D9 ETM registers 
D9.32 TRCIDR3, ID Register 3 


() TRCSYNCPR is read-write so software can change the synchronization period. 


TRCERR, [24] 
Indicates whether TRCVICTLR.TRCERR is implemented: 
1 TRCVICTLR.TRCERR is implemented. 


EXLEVEL_NS, [23:20] 


Each bit controls whether instruction tracing in Non-secure state is implemented for the 
corresponding Exception level: 


@be111 Instruction tracing is implemented for Non-secure ELO, EL1, and EL2 Exception 
levels. 


EXLEVEL S, [19:16] 


Each bit controls whether instruction tracing in Secure state is implemented for the 
corresponding Exception level: 


@b1011 Instruction tracing is implemented for Secure ELO, EL1, and EL3 Exception levels. 
RESO, [15:12] 

RESO Reserved. 
CCITMIN, [11:0] 

The minimum value that can be programmed in TRCCCCTLR.THRESHOLD: 


@xee4 Instruction trace cycle counting minimum threshold is 4. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCIDR3 can be accessed through the external debug interface, offset @x1EC. 
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D9 ETM registers 
D9.33 TRCIDR4, ID Register 4 


D9.33  TRCIDR4, ID Register 4 


The TRCIDR4 indicates the resources available in the ETM trace unit. 


Bit field descriptions 
The TRCIDR4 is a 32-bit register. 


28 27 24 23 20 19 1615 12 11 98 7 


NUMVMIDC} NUMCIDC wumssec] | NUMPC ae | NUMDVC i 


NUMRSPAIRS — SUPPDAC — NUMACPAIRS — 
RESO 


Figure D9-31 TRCIDR4 bit assignments 
NUMVMIDC, [31:28] 
Indicates the number of VMID comparators available for tracing: 
@x1 One VMID comparator is available. 
NUMCIDC, [27:24] 
Indicates the number of CID comparators available for tracing: 
ex1 One Context ID comparator is available. 
NUMSSCC, [23:20] 
Indicates the number of single-shot comparator controls available for tracing: 
ex1 One single-shot comparator control is available. 
NUMRSPAIRS, [19:16] 
Indicates the number of resource selection pairs available for tracing: 
@x7 Eight resource selection pairs are available. 
NUMPC, [15:12] 
Indicates the number of core comparator inputs available for tracing: 
exe Core comparator inputs are not implemented. 
RESO, [11:9] 
RESO Reserved. 
SUPPDAC, [8] 
Indicates whether the implementation supports data address comparisons: This value is: 
7) Data address comparisons are not implemented. 
NUMDVGC, [7:4] 
Indicates the number of data value comparators available for tracing: 
exe Data value comparators not implemented. 
NUMACPAIRS, [3:0] 


Indicates the number of address comparator pairs available for tracing: 
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D9 ETM registers 
D9.33 TRCIDR4, ID Register 4 


ex4 Four address comparator pairs are implemented. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCIDR4 can be accessed through the external debug interface, offset @x1F@. 
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D9 ETM registers 
D9.34 TRCIDRS, ID Register 5 


D9.34 TRCIDRS, ID Register 5 


The TRCIDRS returns how many resources the trace unit supports. 
Bit field descriptions 


3130 2827 2524 23 22 21 1615 12 11 0 


[TU fesse [TE] [se 
}, Ae e L NUMEXTINSEL 
Lee 
NUMSEQSTATE 

NUMCNTR 

REDFUNCNTR 








RESO 


Figure D9-32 TRCIDRS5 bit assignments 

REDFUNCNTR, [31] 

Reduced Function Counter implemented: 

) Reduced Function Counter not implemented. 
NUMCNTR, [30:28] 

Number of counters implemented: 

@be1e@ Two counters implemented. 
NUMSEQSTATE, [27:25] 

Number of sequencer states implemented: 

@b10@ Four sequencer states implemented. 
RESO, [24] 

RESO Reserved. 
LPOVERRIDE, [23] 

Low-power state override support: 

1 Low-power state override support implemented. 
ATBTRIG, [22] 

ATB trigger support: 

1 ATB trigger support implemented. 
TRACEIDSIZE, [21:16] 

Number of bits of trace ID: 

@x@7 ~=Seven-bit trace ID implemented. 


RESO, [15:12] 


RESO Reserved. 


NUMEXTINSEL, [11:9] 





100798 _0301_00_en Copyright © 2016-2018 Arm Limited or its affiliates. All rights D9-545 
reserved. 
Non-Confidential 


D9 ETM registers 
D9.34 TRCIDRS, ID Register 5 


Number of external input selectors implemented: 


@b1e@ Four external input selectors implemented. 


NUMEXTIN, [8:0] 
Number of external inputs implemented: 


@xAD 32 external inputs implemented. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCIDRS can be accessed through the external debug interface, offset @x1F4. 
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D9 ETM registers 
D9.35 TRCIDR8, ID Register 8 


D9.35 TRCIDR8, ID Register 8 


The TRCIDR8 returns the maximum speculation depth of the instruction trace stream. 


Bit field descriptions 
The TRCIDR8 is a 32-bit register. 


31 0 


MAXSPEC 


Figure D9-33 TRCIDR8 bit assignments 
MAXSPEC, [31:0] 
The maximum number of PO elements in the trace stream that can be speculative at any time. 


7) Maximum speculation depth of the instruction trace stream. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé, for Armv8-A architecture profile. 


The TRCIDR8 can be accessed through the external debug interface, offset @x180. 
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D9 ETM registers 
D9.36 TRCIDR9Y, ID Register 9 


D9.36 TRCIDR9Y, ID Register 9 
The TRCIDR9 returns the number of PO right-hand keys that the trace unit can use. 


Bit field descriptions 
The TRCIDR39 is a 32-bit register. 


31 0 


NUMPOKEY 


Figure D9-34 TRCIDR9 bit assignments 
NUMPOKEY, [31:0] 
The number of PO right-hand keys that the trace unit can use. 
7) Number of PO right-hand keys. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé6, for Armv8-A architecture profile. 


The TRCIDR9 can be accessed through the external debug interface, offset @x184. 
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D9 ETM registers 
D9.37 TRCIDR10, ID Register 10 


D9.37 TRCIDR10, ID Register 10 
The TRCIDR1O returns the number of P1 right-hand keys that the trace unit can use. 


Bit field descriptions 
The TRCIDR1O is a 32-bit register. 


31 0 


NUMP1KEY 


Figure D9-35 TRCIDR10 bit assignments 
NUMPIKEY, [31:0] 
The number of P1 right-hand keys that the trace unit can use. 
7) Number of P1 right-hand keys. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé6, for Armv8-A architecture profile. 


The TRCIDR1O0 can be accessed through the external debug interface, offset @x188. 
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D9 ETM registers 
D9.38 TRCIDR11, ID Register 11 


D9.38 TRCIDR11, ID Register 11 
The TRCIDR11 returns the number of special P| right-hand keys that the trace unit can use. 


Bit field descriptions 
The TRCIDR11 is a 32-bit register. 


31 0 


NUMP1SPC 


Figure D9-36 TRCIDR11 bit assignments 
NUMPISPC, [31:0] 
The number of special P1 right-hand keys that the trace unit can use. 


7) Number of special P1 right-hand keys. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCIDR11 can be accessed through the external debug interface, offset @x18C. 
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D9 ETM registers 
D9.39 TRCIDR12, ID Register 12 


D9.39 TRCIDR12, ID Register 12 
The TRCIDR12 returns the number of conditional instruction right-hand keys that the trace unit can use. 


Bit field descriptions 
The TRCIDR1O is a 32-bit register. 


31 0 


NUMCONDKEY 


Figure D9-37 TRCIDR12 bit assignments 


NUMCONDKEY, [31:0] 


The number of conditional instruction right-hand keys that the trace unit can use, including 
normal and special keys. 


7) Number of conditional instruction right-hand keys. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCIDR12 can be accessed through the external debug interface, offset 0x19. 
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D9 ETM registers 
D9.40 TRCIDR13, ID Register 13 


D9.40 TRCIDR13, ID Register 13 
The TRCIDR13 returns the number of special conditional instruction right-hand keys that the trace unit 
can use. 
Bit field descriptions 
The TRCIDR11 is a 32-bit register. 


31 0 


NUMCONDSPC 


Figure D9-38 TRCIDR13 bit assignments 


NUMCONDSPC, [31:0] 


The number of special conditional instruction right-hand keys that the trace unit can use, 
including normal and special keys. 


() Number of special conditional instruction right-hand keys. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé, for Armv8-A architecture profile. 


The TRCIDR13 can be accessed through the external debug interface, offset @x194. 
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D9 ETM registers 
D9.41 TRCIMSPECO, IMPLEMENTATION SPECIFIC Register 0 


D9.41 TRCIMSPECO, IMPLEMENTATION SPECIFIC Register 0 


The TRCIMSPECO shows the presence of any IMPLEMENTATION SPECIFIC features, and enables any features 
that are provided. 


Bit field descriptions 
The TRCIMSPEC0 is a 32-bit register. 


31 4 3 0 
RESO pom 


Figure D9-39 TRCIMSPECO bit assignments 
RESO, [31:4] 
RESO Reserved. 
SUPPORT, [3:0] 


) No IMPLEMENTATION SPECIFIC extensions are supported. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé, for Armv8-A architecture profile. 


The TRCIMSPECO can be accessed through the external debug interface, offset @x1C@. 
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D9 ETM registers 
D9.42 TRCITATBIDR, Integration ATB Identification Register 


D9.42 TRCITATBIDR, Integration ATB Identification Register 
The TRCITATBIDR sets the state of output pins, mentioned in the bit descriptions in this section. 


Bit field descriptions 
The TRCITATBIDR is a 32-bit register. 


31 7 6 0 


em fw 


Figure D9-40 TRCITATBIDR bit assignments 


[31:7] 
Reserved. Read undefined. 


ID, [6:0] 
Drives the ATIDMn[6:0] output pins. 
When a bit is set to 0, the corresponding output pin is LOW. 
When a bit is set to 1, the corresponding output pin is HIGH. 
The TRCITATBIDR bit values correspond to the physical state of the output pins. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé6, for Armv8-A architecture profile. 


The TRCITATBIDR can be accessed through the external debug interface, offset @xEE4. 
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D9 ETM registers 
D9.43 TRCITCTRL, Integration Mode Control Register 


D9.43  TRCITCTRL, Integration Mode Control Register 


The TRCITCTRL enables topology detection or integration testing, by putting the ETM trace unit into 
integration mode. 


Bit field descriptions 
The TRCITCTRL is a 32-bit register. 


31 10 
IME zl 
RESO 


Figure D9-41 TRCITCTRL bit assignments 
RESO, [31:1] 


RESO Reserved. 


IME, [0] 
Integration mode enable bit. The possible values are: 
7) The trace unit is not in integration mode. 
1 The trace unit is in integration mode. This mode enables: 


« A debug agent to perform topology detection. 
* SoC test software to perform integration testing. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé6, for Armv8-A architecture profile. 


The TRCITCTRL can be accessed through the external debug interface, offset @xFee. 
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D9.44 


D9 ETM registers 
D9.44 TRCITIATBINR, Integration Instruction ATB In Register 


TRCITIATBINR, Integration Instruction ATB In Register 


The TRCITIATBINR reads the state of the input pins described in this section. 


Bit field descriptions 
The TRCITIATBINR is a 32-bit register. 


31 


2 1 0 


re 


AFVALIDM 
ATREADYM 


el 


Figure D9-42 TRCITIATBINR bit assignments 


For all non-reserved bits: 
¢« When an input pin is LOW, the corresponding register bit is 0. 
¢ When an input pin is HIGH, the corresponding register bit is 1. 
¢ The TRCITIATBINR bit values always correspond to the physical state of the input pins. 
[31:2] 
Reserved. Read undefined. 


AFVALIDM, [1] 
Returns the value of the AFVALIDMn input pin. 


ATREADYM, [0] 
Returns the value of the ATREADYMn input pin. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCITIATBINR can be accessed through the external debug interface, offset @xEF4. 
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D9-556 


D9 ETM registers 
D9.45 TRCITIATBOUTR, Integration Instruction ATB Out Register 


D9.45 TRCITIATBOUTR, Integration Instruction ATB Out Register 


The TRCITIATBOUTR sets the state of the output pins mentioned in the bit descriptions in this section. 


Bit field descriptions 
The TRCITIATBOUTR is a 32-bit register. 


31 109 8 7 2 1 0 


pytes— AFREADY—| 
ATVALID 
Figure D9-43 TRCITIATBOUTR bit assignments 


For all non-reserved bits: 
« When a bit is set to 0, the corresponding output pin is LOW. 
¢ When a bit is set to 1, the corresponding output pin is HIGH. 
¢ The TRCITIATBOUTR bit values always correspond to the physical state of the output pins. 
[31:10] 
Reserved. Read undefined. 
BYTES, [9:8] 
Drives the ATBYTESMn[1:0] output pins. 
[7:2] 
Reserved. Read undefined. 


AFREADY, [1] 
Drives the AFREADYMn output pin. 


ATVALID, [0] 
Drives the ATVALIDMnhn output pin. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCITIATBOUTR can be accessed through the external debug interface, offset @xEFC. 
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D9 ETM registers 
D9.46 TRCITIDATAR, Integration Instruction ATB Data Register 


D9.46 TRCITIDATAR, Integration Instruction ATB Data Register 


The TRCITIDATAR sets the state of the ATDATAMn output pins shown in the TRCITIDATAR bit 
assignments table. 


Bit field descriptions 
The TRCITIDATAR is a 32-bit register. 


31 543210 


=, ATDATAM[31] — 
ATDATAM[23] 
ATDATAM[15] 


ATDATAM(7] 
ATDATAM[O] 


Figure D9-44 TRCITIDATAR bit assignments 

RESO, [31:5] 

RESO Reserved. 
ATDATAM{31], [4] 
Drives the ATDATAM[31] output. ¢ 
ATDATAM[23], [3] 
Drives the ATDATAM[23] output.4 
ATDATAM[15], [2] 
Drives the ATDATAM[15] output.4 
ATDATAM{[7], [1] 
Drives the ATDATAM[7] output.‘ 
ATDATAM[0], [0] 

Drives the ATDATAM[0] output.‘ 








Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCITIDATAR can be accessed through the external debug interface, offset @xEEC. 





d When a bit is set to Q, the corresponding output pin is LOW. When a bit is set to 1, the corresponding output pin is HIGH. The TRCITIDATAR bit values correspond 
to the physical state of the output pins. 
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D9 ETM registers 
D9.47 TRCLAR, Software Lock Access Register 


D9.47  TRCLAR, Software Lock Access Register 


The TRCLAR controls access to registers using the memory-mapped interface, when PADDRDBG31 is 
LOW. 


When the software lock is set, write accesses using the memory-mapped interface to all ETM trace unit 
registers are IGNORED, except for write accesses to the TRCLAR. 


When the software lock is set, read accesses of TRCPDSR do not change the TRCPDSR.STICKYPD bit. 
Read accesses of all other registers are not affected. 


Bit field descriptions 
The TRCLAR is a 32-bit register. 


31 0 


Figure D9-45 TRCLAR bit assignments 
KEY, [31:0] 
Software lock key value: 


@xC5ACCE55 Clear the software lock. 


All other write values set the software lock. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCLAR can be accessed through the external debug interface, offset @xFBe. 
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D9 ETM registers 
D9.48 TRCLSR, Software Lock Status Register 


TRCLSR, Software Lock Status Register 


The TRCLSR determines whether the software lock is implemented, and indicates the current status of 
the software lock. 


Bit field descriptions 
The TRCLSR is a 32-bit register. 


31 3.210 


RESO nt 
SLK 


SLI 


Figure D9-46 TRCLSR bit assignments 
RESO, [31:3] 
RESO Reserved. 
nTT, [2] 
Indicates size of TRCLAR: 
7) TRCLAR is always 32 bits. 


SLK, [1] 
Software lock status: 
7) Software lock is clear. 
1 Software lock is set. 
SLI, [0] 
Indicates whether the software lock is implemented on this interface. 


1 Software lock is implemented on this interface. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCLSR can be accessed through the external debug interface, offset @xFB4. 
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D9 ETM registers 
D9.49 TRCCNTVRn, Counter Value Registers 0-1 


D9.49 TRCCNTVRn, Counter Value Registers 0-1 


The TRCCNTVRn contains the current counter value. 


Bit field descriptions 
The TRCCNTVRn is a 32-bit register. 


31 1615 0 


VALUE 


RESO 





Figure D9-47 TRCCNTVRn bit assignments 


RESO, [31:16] 


RESO Reserved. 


VALUE, [15:0] 
Contains the current counter value. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCCNTVRn registers can be accessed through the external debug interface, offsets: 


TRCCNTVRO 
6x16. 


TRCCNTVRI 
6x164. 
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D9 ETM registers 
D9.50 TRCOSLAR, OS Lock Access Register 


D9.50 TRCOSLAR, OS Lock Access Register 


The TRCOSLAR sets and clears the OS Lock, to lock out external debugger accesses to the ETM trace 
unit registers. 


Bit field descriptions 
The TRCOSLAR is a 32-bit register. 


31 10 
RESO osik— 


Figure D9-48 TRCOSLAR bit assignments 
RESO, [31:1] 
RESO Reserved. 
OSLK, [0] 
OS Lock key value: 
) Unlock the OS Lock. 
1 Lock the OS Lock. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCOSLAR can be accessed through the external debug interface, offset @x300. 
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D9 ETM registers 
D9.51 TRCOSLSR, OS Lock Status Register 


D9.51 TRCOSLSR, OS Lock Status Register 
The TRCOSLSR returns the status of the OS Lock. 


Bit field descriptions 
The TRCOSLSR is a 32-bit register. 


31 43210 


RESO ost} 
nTT 
OSLK 


OSLM[O0] 


Figure D9-49 TRCOSLSR bit assignments 
RESO, [31:4] 
RESO Reserved. 
OSLM[1], [3] 


OS Lock model [1] bit. This bit is combined with OSLM[0] to form a two-bit field that indicates 
the OS Lock model is implemented. 


The value of this field is always @b1, indicating that the OS Lock is implemented. 


nTT, [2] 
This bit is RAZ, that indicates that software must perform a 32-bit write to update the 
TRCOSLAR. 


OSLK, [1] 
OS Lock status bit: 
i) OS Lock is unlocked. 
1 OS Lock is locked. 
OSLM/[0], [0] 


OS Lock model [0] bit. This bit is combined with OSLM[1] to form a two-bit field that indicates 
the OS Lock model is implemented. 


The value of this field is always @b18, indicating that the OS Lock is implemented. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCOSLSR can be accessed through the external debug interface, offset @x304. 
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D9 ETM registers 
D9.52 TRCPDCR, Power Down Control Register 
D9.52 TRCPDCR, Power Down Control Register 
The TRCPDCR request to the system power controller to keep the ETM trace unit powered up. 


Bit field descriptions 
The TRCPDCR is a 32-bit register. 


31 43 2 0 
Pu— 
RESO 


Figure D9-50 TRCPDCR bit assignments 
RESO, [31:4] 
RESO Reserved. 
PU, [3] 


Powerup request, to request that power to the ETM trace unit and access to the trace registers is 
maintained: 


) Power not requested. 


1 Power requested. 


This bit is reset to 0 on a trace unit reset. 
RESO, [2:0] 


RESO Reserved. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé8, for Armv8-A architecture profile. 


The TRCPDCR can be accessed through the external debug interface, offset @x310. 
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D9 ETM registers 
D9.53 TRCPDSR, Power Down Status Register 


D9.53 TRCPDSR, Power Down Status Register 
The TRCPDSR indicates the power down status of the ETM trace unit. 


Bit field descriptions 
The TRCPDSR is a 32-bit register. 


31 6 5 4 2 1 0 


OSLK— 
RESO STICKYPD 
POWER 


Figure D9-51 TRCPDSR bit assignments 
RESO, [31:6] 


RESO Reserved. 


OSLK, [5] 
OS lock status. 
7) The OS Lock is unlocked. 
1 The OS Lock is locked. 
RESO, [4:2] 


RESO Reserved. 


STICKYPD, [1] 
Sticky power down state. 
7) Trace register power has not been removed since the TRCPDSR was last read. 


1 Trace register power has been removed since the TRCPDSR was last read. 


This bit is set to | when power to the ETM trace unit registers is removed, to indicate that 
programming state has been lost. It is cleared after a read of the TRCPDSR. 
POWER, [0] 


Indicates the ETM trace unit is powered: 


7) ETM trace unit is not powered. The trace registers are not accessible and they all 
return an error response. 


1 ETM trace unit is powered. All registers are accessible. 


If a system implementation allows the ETM trace unit to be powered off independently of the 
debug power domain, the system must handle accesses to the ETM trace unit appropriately. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCPDSR can be accessed through the external debug interface, offset @x314. 
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D9 ETM registers 
D9.54 TRCPIDRO, ETM Peripheral Identification Register 0 


D9.54 TRCPIDRO, ETM Peripheral Identification Register 0 
The TRCPIDRO provides information to identify a trace component. 


Bit field descriptions 
The TRCPIDR0O is a 32-bit register. 


31 8 7 0 


a 


RESO 


Figure D9-52 TRCPIDRO bit assignments 
RESO, [31:8] 
RESO Reserved. 
Part_0, [7:0] 
@x@B Least significant byte of the ETM trace unit part number. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCPIDRO can be accessed through the external debug interface, offset @xFEO. 
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D9 ETM registers 
D9.55 TRCPIDR1, ETM Peripheral Identification Register 1 


D9.55 TRCPIDR1, ETM Peripheral Identification Register 1 
The TRCPIDR1 provides information to identify a trace component. 


Bit field descriptions 
The TRCPIDR1 is a 32-bit register. 


31 8 7 4 3 0 


RESO 


Figure D9-53 TRCPIDR1 bit assignments 
RESO, [31:8] 
RESO Reserved. 
DES_0, [7:4] 
@xB Arm Limited. This is bits[3:0] of JEP106 ID code. 
Part_1, [3:0] 
@xD Most significant four bits of the ETM trace unit part number. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé6, for Armv8-A architecture profile. 


The TRCPIDRI can be accessed through the external debug interface, offset @xFE4. 
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D9 ETM registers 
D9.56 TRCPIDR2, ETM Peripheral Identification Register 2 


TRCPIDR2, ETM Peripheral Identification Register 2 


The TRCPIDR2 provides information to identify a trace component. 


Bit field descriptions 
The TRCPIDR2 is a 32-bit register. 


31 8 7 432 0 
JEDEC —! 
RESO 


Figure D9-54 TRCPIDR2 bit assignments 
RESO, [31:8] 
RESO Reserved. 
Revision, [7:4] 


@xe ETM revision. 


JEDEC, [3] 

@b1 RES1. Indicates a JEP 106 identity code is used. 
DES 1, [2:0] 

@be11 Arm Limited. This is bits[6:4] of JEP106 ID code. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCPIDR2 can be accessed through the external debug interface, offset @xFE8. 
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D9 ETM registers 
D9.57 TRCPIDR3, ETM Peripheral Identification Register 3 


TRCPIDR3, ETM Peripheral Identification Register 3 


The TRCPIDR3 provides information to identify a trace component. 


Bit field descriptions 
The TRCPIDR3 is a 32-bit register. 


31 8 7 4 3 0 
RESO 


Figure D9-55 TRCPIDR3 bit assignments 
RESO, [31:8] 


RESO Reserved. 


REVAND, [7:4] 


@xe Part minor revision. 
CMOD, [3:0] 
@xe Not customer modified. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé6, for Armv8-A architecture profile. 


The TRCPIDR3 can be accessed through the external debug interface, offset @xFEC. 
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D9 ETM registers 
D9.58 TRCPIDR4, ETM Peripheral Identification Register 4 


D9.58 TRCPIDR4, ETM Peripheral Identification Register 4 
The TRCPIDR4 provides information to identify a trace component. 


Bit field descriptions 
The TRCPIDR4 is a 32-bit register. 


31 8 7 4 3 0 


RESO 


Figure D9-56 TRCPIDR4 bit assignments 
RESO, [31:8] 
RESO Reserved. 
Size, [7:4] 


exe Size of the component. Log2 the number of 4KB pages from the start of the 
component to the end of the component ID registers. 


DES _2, [3:0] 
@x4 Arm Limited. This is bits[3:0] of the JEP106 continuation code. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé, for Armv8-A architecture profile. 


The TRCPIDR4 can be accessed through the external debug interface, offset @xFD@. 
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D9 ETM registers 
D9.59 TRCPIDRn, ETM Peripheral Identification Registers 5-7 


D9.59 TRCPIDRn, ETM Peripheral Identification Registers 5-7 
No information is held in the Peripheral ID5, Peripheral ID6, and Peripheral ID7 Registers. 


They are reserved for future use and are RESO. 
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D9 ETM registers 
D9.60 TRCPRGCTLR, Programming Control Register 


D9.60 TRCPRGCTLR, Programming Control Register 
The TRCPRGCTLR enables the ETM trace unit. 


Bit field descriptions 
The TRCPRGCTLR is a 32-bit register. 


31 10 


as 


en 





RESO 


Figure D9-57 TRCPRGCTLR bit assignments 
RESO, [31:1] 
RESO Reserved. 
EN, [0] 
Trace program enable: 


) The ETM trace unit interface in the core is disabled, and clocks are enabled only when 
necessary to process APB accesses, or drain any already generated trace. This is the 
reset value. 


1 The ETM trace unit interface in the core is enabled, and clocks are enabled. Writes to 
most trace registers are IGNORED. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCPRGCTLR can be accessed through the external debug interface, offset @xee4. 
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D9 ETM registers 
D9.61 TRCRSCTLRn, Resource Selection Control Registers 2-16 


TRCRSCTLRn, Resource Selection Control Registers 2-16 


The TRCRSCTLRn controls the trace resources. There are eight resource pairs, the first pair is 
predefined as {0,1,pair=0} and having reserved select registers. This leaves seven pairs to be 
implemented as programmable selectors. 


Bit field descriptions 
The TRCRSCTLRn is a 32-bit register. 


31 2221201918 1615 8 7 0 


PAIRINV— LINv 
RESO 


Figure D9-58 TRCRSCTLRn bit assignments 
RESO, [31:22] 
RESO Reserved. 
PAIRINY, [21] 
Inverts the result of a combined pair of resources. 
This bit is implemented only on the lower register for a pair of resource selectors. 
INV, [20] 


Inverts the selected resources: 


(7) Resource is not inverted. 
1 Resource is inverted. 
RESO, [19] 


RESO Reserved. 


GROUP, [18:16] 


Selects a group of resources. See the Arm® ETM Architecture Specification, ETMv4 for more 
information. 


RESO, [15:8] 
RESO Reserved. 
SELECT, [7:0] 


Selects one or more resources from the required group. One bit is provided for each resource 
from the group. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCRSCTLRn can be accessed through the external debug interface, offset @x208-@x23C. 
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D9 ETM registers 
D9.62 TRCSEQEVRn, Sequencer State Transition Control Registers 0-2 


TRCSEQEVRn, Sequencer State Transition Control Registers 0-2 


The TRCSEQEVRn defines the sequencer transitions that progress to the next state or backwards to the 
previous state. The ETM trace unit implements a sequencer state machine with up to four states. 


Bit field descriptions 
The TRCSEQEVRn is a 32-bit register. 


31 161514 1211 876 43 0 
B TYPE—! F TYPE— 
RESO 


Figure D9-59 TRCSEQEVRnh bit assignments 

RESO, [31:16] 

RESO Reserved. 
B TYPE, [15] 

Selects the resource type to move backwards to this state from the next state: 

7) Single selected resource. 

1 Boolean combined resource pair. 
RESO, [14:12] 

RESO Reserved. 
B SEL, [11:8] 

Selects the resource number, based on the value of B TYPE: 

When B TYPE is 0, selects a single selected resource from 0-15 defined by bits[3:0]. 

When B TYPE is 1, selects a Boolean combined resource pair from 0-7 defined by bits[2:0]. 
F TYPE, [7] 


Selects the resource type to move forwards from this state to the next state: 


@ Single selected resource. 
1 Boolean combined resource pair. 
RESO, [6:4] 


RESO Reserved. 


F SEL, [3:0] 
Selects the resource number, based on the value of F TYPE: 
When F TYPE is 0, selects a single selected resource from 0-15 defined by bits[3:0]. 
When F TYPE is 1, selects a Boolean combined resource pair from 0-7 defined by bits[2:0]. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCSEQEVRn registers can be accessed through the external debug interface, offsets: 
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D9 ETM registers 
D9.62 TRCSEQEVRn, Sequencer State Transition Control Registers 0-2 


TRCSEQEVRO 
Qx10@. 


TRCSEQEVRI 
0x104. 


TRCSEQEVR2 
0x18. 
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D9 ETM registers 
D9.63 TRCSEQRSTEVR, Sequencer Reset Control Register 


TRCSEQRSTEVR, Sequencer Reset Control Register 


The TRCSEQRSTEVR resets the sequencer to state 0. 


Bit field descriptions 
The TRCSEQRSTEVR is a 32-bit register 


31 876 43 0 
RESETTYPE— 
RESO 


Figure D9-60 TRCSEQRSTEVR bit assignments 
RESO, [31:8] 
RESO Reserved. 
RESETTYPE, [7] 


Selects the resource type to move back to state 0: 


7) Single selected resource. 
1 Boolean combined resource pair. 
RESO, [6:4] 


RESO Reserved. 


RESETSEL, [3:0] 
Selects the resource number, based on the value of RESETTYPE: 
When RESETTYPE is 0, selects a single selected resource from 0-15 defined by bits[3:0]. 


When RESETTYPE is 1, selects a Boolean combined resource pair from 0-7 defined by 
bits[2:0]. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé, for Armv8-A architecture profile. 


The TRCSEQRSTEVR can be accessed through the external debug interface, offset @x118. 
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D9 ETM registers 
D9.64 TRCSEQSTR, Sequencer State Register 


D9.64 TRCSEQSTR, Sequencer State Register 
The TRCSEQSTR holds the value of the current state of the sequencer. 


Bit field descriptions 
The TRCSEQSTR is a 32-bit register 





31 210 
STATE —! 
RESO 


Figure D9-61 TRCSEQSTR bit assignments 
RESO, [31:2] 
RESO Reserved. 
STATE, [1:0] 
Current sequencer state: 


@bee ~~ State 0. 
@be1 State 1. 
@b10 State 2. 
@b11_ ~— State 3. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé, for Armv8-A architecture profile. 


The TRCSEQSTR can be accessed through the external debug interface, offset @x11C. 
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D9 ETM registers 
D9.65 TRCSSCCRO, Single-Shot Comparator Control Register 0 


D9.65 TRCSSCCRO, Single-Shot Comparator Control Register 0 
The TRCSSCCRO controls the single-shot comparator. 


Bit field descriptions 
The TRCSSCSR0 is a 32-bit register 


31 25 24 23 20 19 1615 8 7 0 
RsT— 
RESO 


Figure D9-62 TRCSSCCRO bit assignments 
RESO, [31:25] 
RESO Reserved. 
RST, [24] 


Enables the single-shot comparator resource to be reset when it occurs, to enable another 
comparator match to be detected: 


1 Reset enabled. Multiple matches can occur. 
RESO, [23:20] 
RESO Reserved. 
ARC, [19:16] 
Selects one or more address range comparators for single-shot control. 
One bit is provided for each implemented address range comparator. 
RESO, [15:8] 
RESO Reserved. 
SAC, [7:0] 
Selects one or more single address comparators for single-shot control. 
One bit is provided for each implemented single address comparator. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCSSCCRO can be accessed through the external debug interface, offset 0x28. 
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D9 ETM registers 
D9.66 TRCSSCSRO, Single-Shot Comparator Status Register 0 


D9.66 TRCSSCSRO, Single-Shot Comparator Status Register 0 


The TRCSSCSRO indicates the status of the single-shot comparator. TRCSSCSR0O is sensitive to 
instruction addresses. 


Bit field descriptions 
The TRCSSCSR0 is a 32-bit register 


31 30 3.2 10 


L_STATUS pbyv— 
DA 
= INST 


Figure D9-63 TRCSSCSR0O bit assignments 
STATUS, [31] 
Single-shot status. This indicates whether any of the selected comparators have matched: 
) Match has not occurred. 


1 Match has occurred at least once. 


When programming the ETM trace unit, if TRCSSCCRn.RST is b0, the STATUS bit must be 
explicitly written to 0 to enable this single-shot comparator control. 


RESO, [30:3] 

RESO Reserved. 
DY, [2] 

Data value comparator support: 

) Single-shot data value comparisons not supported. 
DA, [1] 

Data address comparator support: 

) Single-shot data address comparisons not supported. 
INST, [0] 

Instruction address comparator support: 


1 Single-shot instruction address comparisons supported. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé6, for Armv8-A architecture profile. 


The TRCSSCSRO can be accessed through the external debug interface, offset @x2A@. 
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D9 ETM registers 
D9.67 TRCSTALLCTLR, Stall Control Register 


TRCSTALLCTLR, Stall Control Register 


The TRCSTALLCTLR enables the ETM trace unit to stall the Cortex-A76 core if the ETM trace unit 
FIFO overflows. 


Bit field descriptions 
The TRCSTALLCTLR is a 32-bit register. 


31 98 7 43210 


eee ee 


RESO ISTALL ca] LEVEL _| 
Figure D9-64 TRCSTALLCTLR bit assignments 
RESO, [31:9] 
RESO Reserved. 
ISTALL, [8] 


Instruction stall bit. Controls if the trace unit can stall the core when the instruction trace buffer 
space is less than LEVEL: 


(7) The trace unit does not stall the core. 
1 The trace unit can stall the core. 
RESO, [7:4] 


RESO Reserved. 
LEVEL, [3:2] 
Threshold level field. The field can support 4 monotonic levels from @b@@ to @b11, where: 


@bee@ = Zero invasion. This setting has a greater risk of an ETM trace unit FIFO overflow. 


@b11 Maximum invasion occurs but there is less risk of a FIFO overflow. 


RESO, [1:0] 


RESO Reserved. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCSTALLCTLR can be accessed through the external debug interface, offset @x@2C. 
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D9 ETM registers 
D9.68 TRCSTATR, Status Register 


D9.68 TRCSTATR, Status Register 
The TRCSTATR indicates the ETM trace unit status. 


Bit field descriptions 
The TRCSTATR is a 32-bit register. 





31 210 
PMSTABLE — 
RESO IDLE 


Figure D9-65 TRCSTATR bit assignments 
RESO, [31:2] 
RESO Reserved. 
PMSTABLE, [1] 


Indicates whether the ETM trace unit registers are stable and can be read: 


) The programmers model is not stable. 

1 The programmers model is stable. 
IDLE, [0] 

Idle status: 

() The ETM trace unit is not idle. 

1 The ETM trace unit is idle. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCSTATR can be accessed through the external debug interface, offset @x@e@C. 
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D9 ETM registers 
D9.69 TRCSYNCPR, Synchronization Period Register 


D9.69 TRCSYNCPR, Synchronization Period Register 


The TRCSYNCPR controls how often periodic trace synchronization requests occur. 


Bit field descriptions 
The TRCSYNCPR is a 32-bit register. 


31 5 4 0 


RESO 


Figure D9-66 TRCSYNCPR bit assignments 
RESO, [31:5] 


RESO Reserved. 


PERIOD, [4:0] 

Defines the number of bytes of trace between synchronization requests as a total of the number 

of bytes generated by both the instruction and data streams. The number of bytes is 2N where N 

is the value of this field: 

« A value of zero disables these periodic synchronization requests, but does not disable other 
synchronization requests. 

¢ The minimum value that can be programmed, other than zero, is 8, providing a minimum 
synchronization period of 256 bytes. 

* The maximum value is 20, providing a maximum synchronization period of 27° bytes. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCSYNCPR can be accessed through the external debug interface, offset @x@34. 
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D9 ETM registers 
D9.70 TRCTRACEIDR, Trace ID Register 


D9.70 TRCTRACEIDR, Trace ID Register 
The TRCTRACEIDR sets the trace ID for instruction trace. 


Bit field descriptions 
The TRCTRACEIDR is a 32-bit register. 


31 7 6 0 


RESO 


Figure D9-67 TRCTRACEIDR bit Assignments 
RESO, [31:7] 
RESO Reserved. 
TRACEID, [6:0] 
Trace ID value. When only instruction tracing is enabled, this provides the trace ID. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCTRACEIDR can be accessed through the external debug interface, offset 0x04e. 
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D9 ETM registers 
D9.71 TRCTSCTLR, Global Timestamp Control Register 


D9.71 TRCTSCTLR, Global Timestamp Control Register 


The TRCTSCTLR controls the insertion of global timestamps in the trace streams. When the selected 
event is triggered, the trace unit inserts a global timestamp into the trace streams. The event is selected 
from one of the Resource Selectors. 


Bit field descriptions 
The TRCTSCTLR is a 32-bit register. 


31 876 43 0 
L_TYPE 
RESO 


Figure D9-68 TRCTSCTLR bit assignments 
RESO, [31:8] 


RESO Reserved. 


TYPE, [7] 
Single or combined resource selector. 


RESO, [6:4] 
RESO Reserved. 
SEL, [3:1] 
Identifies the resource selector to use. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armvé6, for Armv8-A architecture profile. 


The TRCTSCTLR can be accessed through the external debug interface, offset @x@3@. 
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D9 ETM registers 
D9.72 TRCVICTLR, ViewIlnst Main Control Register 


D9.72 TRCVICTLR, Viewinst Main Control Register 
The TRCVICTLR controls instruction trace filtering. 


Bit field descriptions 
The TRCVICTLR is a 32-bit register. 


31 24 23 20 19 1615 1211109 8 7 6 


L EXLEVEL_S L TYPE 
RESO EXLEVEL_NS SSSTATUS 
TRCRESET 
TRCERR 


Figure D9-69 TRCVICTLR bit assignments 


RESO, [31:24] 


RESO Reserved. 


EXLEVEL_NS, [23:20] 


In Non-secure state, each bit controls whether instruction tracing is enabled for the 
corresponding Exception level: 


7) Trace unit generates instruction trace, in Non-secure state, for Exception level n. 
1 Trace unit does not generate instruction trace, in Non-secure state, for Exception level 
n. 


The Exception levels are: 
Bit[20]_ Exception level 0. 


Bit[21]_ Exception level 1. 
Bit[22] Exception level 2. 
Bit[23] RAZ/WI. Instruction tracing is not implemented for Exception level 3. 


EXLEVEL 5S, [19:16] 


In Secure state, each bit controls whether instruction tracing is enabled for the corresponding 
Exception level: 


7) Trace unit generates instruction trace, in Secure state, for Exception level n. 


1 Trace unit does not generate instruction trace, in Secure state, for Exception level n. 


The Exception levels are: 

Bit[16] Exception level 0. 

Bit[17] Exception level 1. 

Bit[18] RAZ/WI. Instruction tracing is not implemented for Exception level 2. 
Bit[19] Exception level 3. 


RESO, [15:12] 


RESO Reserved. 


TRCERR, [11] 
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D9 ETM registers 
D9.72 TRCVICTLR, ViewIlnst Main Control Register 


Selects whether a system error exception must always be traced: 


7) System error exception is traced only if the instruction or exception immediately 
before the system error exception is traced. 


1 System error exception is always traced regardless of the value of ViewInst. 
TRCRESET, [10] 
Selects whether a reset exception must always be traced: 


7) Reset exception is traced only if the instruction or exception immediately before the 
reset exception is traced. 


1 Reset exception is always traced regardless of the value of ViewInst. 


SSSTATUS, [9] 


Indicates the current status of the start/stop logic: 


@ Start/stop logic is in the stopped state. 
1 Start/stop logic is in the started state. 
RESO, [8] 


RESO Reserved. 


TYPE, [7] 
Selects the resource type for the viewinst event: 
@ Single selected resource. 
1 Boolean combined resource pair. 
RESO, [6:4] 


RESO Reserved. 
SEL, [3:0] 
Selects the resource number to use for the viewinst event, based on the value of TYPE: 
When TYPE is 0, selects a single selected resource from 0-15 defined by bits[3:0]. 
When TYPE is 1, selects a Boolean combined resource pair from 0-7 defined by bits[2:0]. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCVICTLR can be accessed through the external debug interface, offset 0x@80. 
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D9 ETM registers 
D9.73 TRCVIIECTLR, ViewInst Include-Exclude Control Register 


D9.73. TRCVIIECTLR, Viewlnst Include-Exclude Control Register 


The TRCVIIECTLR defines the address range comparators that control the ViewInst Include/Exclude 
control. 


Bit field descriptions 
The TRCVIIECTLR is a 32-bit register. 


31 20 19 1615 4 3 0 
RESO 


Figure D9-70 TRCVIIECTLR bit assignments 
RESO, [31:20] 


RESO Reserved. 


EXCLUDE, [19:16] 
Defines the address range comparators for ViewInst exclude control. One bit is provided for 
each implemented Address Range Comparator. 


RESO, [15:4] 
RESO Reserved. 
INCLUDE, [3:0] 
Defines the address range comparators for ViewInst include control. 


Selecting no include comparators indicates that all instructions must be included. The exclude 
control indicates which ranges must be excluded. 


One bit is provided for each implemented Address Range Comparator. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCVIIECTLR can be accessed through the external debug interface, offset 0x084. 
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D9 ETM registers 
D9.74 TRCVISSCTLR, ViewInst Start-Stop Control Register 


D9.74 TRCVISSCTLR, Viewlnst Start-Stop Control Register 
The TRCVISSCTLR defines the single address comparators that control the ViewInst Start/Stop logic. 


Bit field descriptions 
The TRCVISSCTLR is a 32-bit register. 


31 24 23 1615 8 7 0 


RESO 


Figure D9-71 TRCVISSCTLR bit assignments 
RESO, [31:24] 
RESO Reserved. 
STOP, [23:16] 
Defines the single address comparators to stop trace with the ViewInst Start/Stop control. 
One bit is provided for each implemented single address comparator. 
RESO, [15:8] 
RESO Reserved. 
START, [7:0] 
Defines the single address comparators to start trace with the ViewInst Start/Stop control. 
One bit is provided for each implemented single address comparator. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv6, for Armv8-A architecture profile. 


The TRCVISSCTLR can be accessed through the external debug interface, offset 0x088. 
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D9 ETM registers 
D9.75 TRCVMIDCVRO, VMID Comparator Value Register 0 


D9.75 TRCVMIDCVRO, VMID Comparator Value Register 0 
The TRCVMIDCVR0 contains a VMID value. 


Bit field descriptions 


63 32 31 0 


VALUE 
RESO 


Figure D9-72 TRCVMIDCVR0O bit assignments 
RESO, [63:32] 


RESO Reserved. 


VALUE, [31:0] 
The VMID value. 


The TRCVMIDCVRO can be accessed through the internal memory-mapped interface and the external 
debug interface, offset @x649. 


Usage constraints 
Accepts writes only when the trace unit is disabled. 


Configurations 
Available in all configurations. 
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D9 ETM registers 
D9.76 TRCVMIDCCTLRO, Virtual context identifier Comparator Control Register 0 


D9.76 TRCVMIDCCTLRO, Virtual context identifier Comparator Control Register 0 


The TRCVMIDCCTLRO contains the Virtual machine identifier mask value for the TRCVMIDCVRO 
register. 


Bit field descriptions 
The TRCVMIDCCTLR0O is a 32-bit register. 


31 4 3 0 


RESO 


Figure D9-73 TRCVMIDCCTLRO bit assignments 
RESO, [31:4] 
RESO Reserved. 
COMPO, [3:0] 


Controls the mask value that the trace unit applies to TRCVMIDCVRO. Each bit in this field 
corresponds to a byte in TRCVMIDCVRO. When a bit is: 


7) The trace unit includes the relevant byte in TRCVMIDCVRO when it performs the 
Virtual context ID comparison. 
1 The trace unit ignores the relevant byte in TRCVMIDCVR0O when it performs the 


Virtual context ID comparison. 


Bit fields and details not provided in this description are architecturally defined. See the Arm® 
Architecture Reference Manual Armv8, for Armv8-A architecture profile. 


The TRCVMIDCCTLR0O can be accessed through the external debug interface, offset @x688. 
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Part E 
Appendices 


Appendix A 
Cortex®-A76 Core AArch32 UNPREDICTABLE 
behaviors 


This appendix describes the cases in which the Cortex-A76 core implementation diverges from the 
preferred behavior described in Armv8 AArch32 UNPREDICTABLE behaviors. 


It contains the following sections: 

¢ A.J Use of R15 by Instruction on page Appx-A-594. 

¢ A.2 Load/Store accesses crossing page boundaries on page Appx-A-595. 
¢« A.3 Armv8 Debug UNPREDICTABLE behaviors on page Appx-A-596. 

¢ A.4 Other UNPREDICTABLE behaviors on page Appx-A-599. 
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A.1 Use of R15 by Instruction 


A.1 Use of R15 by Instruction 


If the use of R15 as a base register for a load or store is UNPREDICTABLE, the value used by the load or store 
using R15 as a base register is the Program Counter (PC) with its usual offset and, in the case of T32 
instructions, with the forced word alignment. In this case, if the instruction specifies Writeback, then the 
load or store is performed without Writeback. 


The Cortex-A76 core does not implement a Read 0 or Ignore Write policy on UNPREDICTABLE use of R15 
by instruction. Instead, the Cortex-A76 core takes an UNDEFINED exception trap. 
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A.2 Load/Store accesses crossing page boundaries 


A.2 Load/Store accesses crossing page boundaries 
The Cortex-A76 core implements a set of behaviors for load or store accesses that cross page boundaries. 
Crossing a page boundary with different memory types or shareability attributes 


The Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile, states that a 
memory access from a load or store instruction that crosses a page boundary to a memory 
location that has a different memory type or shareability attribute results in CONSTRAINED 
UNPREDICTABLE behavior. 


Crossing a 4KB boundary with a Device access 


The Arm® Architecture Reference Manual Armv8, for Armv8-A architecture profile, states that a 
memory access from a load or store instruction to Device memory that crosses a 4KB boundary 
results 1n CONSTRAINED UNPREDICTABLE behavior. 


Implementation (for both page boundary specifications) 
For an access that crosses a page boundary, the Cortex-A76 core implements the following 
behaviors: 
¢ Store crossing a page boundary: 
— No alignment fault. 
— The access is split into two stores. 
— Each store uses the memory type and shareability attributes associated with its own 
address. 
¢ Load crossing a page boundary (Device to Device and Normal to Normal): 
— No alignment fault. 
— The access is split into two loads. 
— Each load uses the memory type and shareability attributes associated with its own 
address. 
¢ Load crossing a page boundary (Device to Normal and Normal to Device): 


— The instruction will generate an alignment fault. 
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A Cortex*-A76 Core AArch32 UNPREDICTABLE behaviors 
A.3 Armv8 Debug UNPREDICTABLE behaviors 


Armv8s Debug UNPREDICTABLE behaviors 


This section describes the behavior that the Cortex-A76 core implements when: 


¢ A topic has multiple options. 
¢ The behavior differs from either or both of the Options and Preferences behaviors. 


Note 





This section does not describe the behavior when a topic only has a single option and the core 
implements the preferred behavior. 





Table A-1 Armv8 Debug UNPREDICTABLE behaviors 





Scenario 


Behavior 





A32 BKPT instruction with condition code not 
AL 


The core implements the following preferred option: 
¢ Executed unconditionally. 





Address match breakpoint match only on second 
halfword of an instruction 


The core generates a breakpoint on the instruction if CPSR.IL=0. In the case of 
CPSR.IL=1, the core does not generate a breakpoint exception. 





Address matching breakpoint on A32 instruction 
with DBGBCRn.BAS=1100 


The core implements the following option: 
* Does match if CPSR.IL=0. 





Address match breakpoint match on T32 
instruction at DBGBCRn+2 with 
DBGBCRn.BAS=1111 


The core implements the following option: 


¢ Does match. 





Link to non-existent breakpoint or breakpoint that 
is not context-aware 


The core implements the following option: 


* No Breakpoint or Watchpoint debug event is generated, and the LBN field of 
the linker reads UNKNOWN. 





DBGWCRn_EL1.MASK!=00000 and 
DBGWCRn EL1.BAS!=11111111 


The core behaves as indicated in the sole Preference: 
* DBGWCRn_EL1.BAS is IGNORED and treated as if @x11111111. 





Address match breakpoint with 
DBGBCRn_EL1.BAS=0000 


The core implements the following option: 
¢ As if disabled. 





DBGWCRn_EL1.BAS specifies a non- 
contiguous set of bytes within a double-word 


The core implements the following option: 
« A Watchpoint debug event is generated for each byte. 





A32 HLT instruction with condition code not AL 


The core implements the following option: 
¢ Executed unconditionally. 





Execute instruction at a given EL when the 
corresponding EDECCR bit is 1 and Halting is 
allowed 


The core behaves as follows: 


* Generates debug event and Halt no later than the instruction following the next 
Context Synchronization operation (CSO) excluding ISB instruction. 





H>N or H= 0 at Non-secure EL1 and ELO, 
including value read from PMCR_ELO.N 


The core implements: 

« A simple implementation where all of HPMN[4:0] are implemented, and In 
Non-secure EL1 and EL0: 
— IfH>N thenMEN. 
— IfH=0thenM=0. 








H>N or H=0: value read back in 
MDCR_EL2.HPMN 





The core implements: 


« A simple implementation where all of HPMN[4:0] are implemented and for 
reads of MDCR_EL2.HPMN, return H. 
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A.3 Armv8 Debug UNPREDICTABLE behaviors 


Table A-1 Armv8 Debug UNPREDICTABLE behaviors (continued) 





Scenario 


Behavior 





P>M and P #31: reads and writes of PM 
XEVTYPER_ELO and PMXEVCNTR_ELO 


The core implements: 


« A simple implementation where all of SEL[4:0] are implemented, and if P > 
M and P #31 then the register is RESO. 





P>M and P #31: value read in 
PMSELR_ELO.SEL 


The core implements: 
« A simple implementation where all of SEL[4:0] are implemented, and if P > 
M and P #31 then the register is RESO. 





P = 31: reads and writes of PMXEVCNTR_ELO 


The core implements: 
* RESO. 





n> M: Direct access to PMEVCNTRn_ELO and 
PMEVTYPERn _ ELO 


The core implements: 


¢ Ifn=>N, then the instruction is UNALLOCATED. 
* Otherwise if n= M, then the register is RESO. 





Exiting Debug state while instruction issued 
through EDITR is in flight 


The core implements the following option: 
¢ The instruction completes in Debug state before executing the restart. 





Using memory-access mode with a non-word- 
aligned address 


The core behaves as indicated in the sole Preference: 
* Does unaligned accesses, faulting if these are not permitted for the memory 
type. 





Access to memory-mapped registers mapped to 
Normal memory 


The core behaves as indicated in the sole Preference: 

¢ The access is generated, and accesses might be repeated, gathered, split or 
resized, in accordance with the rules for Normal memory, meaning the effect is 
UNPREDICTABLE. 





Not word-sized accesses or (AArch64 only) 
doubleword-sized accesses 


> 


The core behaves as indicated in the sole Preference: 


* Reads occur and return UNKNOWN data. 
« Writes set the accessed register(s) to UNKNOWN. 





External debug write to register that is being reset 








The core behaves as indicated in the sole Preference: 
¢ Takes reset value. 
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Table A-1 Armv8 Debug UNPREDICTABLE behaviors (continued) 





Scenario 


Behavior 





Accessing reserved debug registers 


The core deviates from preferred behavior because the hardware cost to decode 


some of these addresses in debug power domain is significantly high. 


The actual behavior is: 


1. 


For reserved debug registers in the address range @x@00-@xCFC and 
Performance Monitors registers in the address range @x@@@, the response is 
either CONSTRAINED UNPREDICTABLE Error or RESO when any of the following 
errors occurs: 


Off 
The core power domain is either completely off or in a low-power 
state where the core power domain registers cannot be accessed. 
DLK 
DoubleLockStatus() is TRUE and OS double-lock is locked 
(EDPRSR.DLK is 1). 
OSLK 


OS lock is locked (OSLSR_EL1.OSLK is 1). 
For reserved debug registers in the address ranges @x4@0-Ox4FC and 
@x800-Ox8FC, the response is CONSTRAINED UNPREDICTABLE Error or RESO 
when the conditions in / do not apply and the following error occurs: 


EDAD 
AllowExternalDebugAccess() is FALSE. External debug 
access is disabled. 
For reserved Performance Monitor registers in the address ranges 
@x@00-Ox@FC and @x400-0x47C, the response is either CONSTRAINED 
UNPREDICTABLE Error, or RESO when the conditions in / and 2 do not apply, 
and the following error occurs: 


EPMAD 
AllowExternalPMUAccess() is FALSE. External Performance 
Monitors access is disabled. 








Clearing the clear-after-read EDPRSR bits when 
Core power domain is on, and 
DoubleLockStatus() is TRUE 





The core behaves as indicated in the sole Preference: 


Bits are not cleared to zero. 
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A.4 Other UNPREDICTABLE behaviors 


A.4 Other UNPREDICTABLE behaviors 


This section describes other UNPREDICTABLE behaviors. 


Table A-2 Other UNPREDICTABLE behaviors 





Scenario Description 





CSSELR indicates a cache that | If CSSELR indicates a cache that is not implemented, then on a read of the CCSIDR the behavior is 
is not implemented. CONSTRAINED UNPREDICTABLE, and can be one of the following: 

¢ The CCSIDR read is treated as NOP. 

* The CCSIDR read is UNDEFINED. 

¢ The CCSIDR read returns an UNKNOWN value (preferred). 





HDCR.HPMN is set to 0, or to | Tf HDCR.HPMN is set to 0, or to a value larger than PMCR.N, then the behavior in Non-secure ELO 
a value larger than PMCR.N. | and ELI is CONSTRAINED UNPREDICTABLE, and one of the following must happen: 


¢ The number of counters accessible is an UNKNOWN non-zero value less than PMCR.N. 
¢ There is no access to any counters. 


For reads of HDCR.HPMN by EL2 or higher, if this field is set to 0 or to a value larger than 

PMCR.N, the core must return a CONSTRAINED UNPREDICTABLE value that is one of: 

* PMCR.N. 

¢ The value that was written to HDCR.HPMN. 

¢ (The value that was written to HDCR.HPMN) modulo 2h, where h is the smallest number of bits 
required for a value in the range 0 to PMCR.N. 





CRC32 or CRC32C instruction | On read of the instruction, the behavior is CONSTRAINED UNPREDICTABLE, and the instruction executes 
with size==64. with the additional decode: size==32. 





CRC32 or CRC32C instruction | The core implements the following option: 


with cond!=1110 inthe Al |+ Executed unconditionally. 
encoding. 
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Appendix B 
Revisions 


This appendix describes the technical changes between released issues of this book. 


It contains the following section: 
* B.1 Revisions on page Appx-B-602. 
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B.1 Revisions 
This appendix describes the technical changes between released issues of this book 
Table B-1 Issue 0000-00 
Change Location | Affects 
First release | ~ . 
Table B-2 Differences between Issue 0000-00 and Issue 0100-00 
Change Location Affects 
Added support for 128KB L2 cache size. Throughout document r1p0 
Added note to indicate support for Dot Product | 4/./ About the core on page A1-26 r1p0 
instructions introduced in the Armv8.4 
Extension. 
Updated BPIQ data location encoding table. A6.6.1 Encoding for L1 instruction cache tag, LI instruction cache | r\p0 
data, LI BTB, L1 GHB, L1 TLB instruction, and BPIQ 
on page A6-80 
Updated replacement policy to dynamic biased | 47-/ About the L2 memory system on page A7-98 rlp0 
replacement policy. 
Updated reset values for ID AA64ISARO ELI, | 82.4 44rch64 registers by functional group on page B2-136 rlp0 
IDAA64MMFRI_EL1, IDMMFR4_ELI, and 
MIDR ELI. 
Updated CCSIDR_EL1 encodings table. B2.18 CCSIDR_EL1, Cache Size ID Register, EL1 on page B2-159 | rlp0 
Updated CPUECTLR_ ELI register description. | 22-27 CPUECTLR_ELI, CPU Extended Control Register, EL1 rlp0 
on page B2-174 
Updated bits [43:32] of ID AA64ISARO_EL1 B2.57 ID_AA64ISARO_EL1, AArch64 Instruction Set Attribute rlp0 
register. 7 7 Register 0, ELI on page B2-221 
Updated bits [15:12] of ID AA64MMER1 ELI B2.60 ID_AA64MMFRI1_EL1, AArch64 Memory Model Feature rlp0 
register. Register 1, ELI on page B2-226 
Added ID_ISAR6 ELI register. B2.72 ID_ISAR6_EL1, AArch32 Instruction Set Attribute Register 6, |r1p0 
ELI on page B2-247 
Added Activity Monitor Unit chapter. Chapter C3 Activity Monitor Unit on page C3-387 All versions 
Updated reset value for TRCIDR1 register. D9.1 ETM register summary on page D9-497 r1p0 
Updated bits [3:0] of TRCIDR1 register. D9.30 TRCIDRI1, ID Register 1 on page D9-538 rlp0 
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Table B-3 Differences between Issue 0100-00 and Issue 0200-00 






































Change Location Affects 

Fixed typographical errors. Throughout document 7 

Added information for L1 Prefetch History | /b/e 48-1 Cache protection behavior on page A8-103 12p0 

Table. 

Updated ATCR_EL12 description. Table B2-3 AArch64 implementation defined registers on page B2-134 r2p0 

Updated reset value for B2.4 AArch64 registers by functional group on page B2-136 r2p0 

ID_AA64PFRO_EL1. 

Updated reset value for ID PFRO ELI. B2.4 AArch64 registers by functional group on page B2-136 12p0 

ed new register 3 : rch64 registers by functional group on page B2- 

Added gister ID_PFR2_EL1 B2.4 AArch64 reg by / group on page B2-136 12p0 
B2.80 ID_PFR2_EL1, AArch32 Processor Feature Register 2, EL1 
on page B2-262 

Updated reset value for MIDR_EL1. B2.4 AArch64 registers by functional group on page B2-136 12p0 
B2.85 MIDR_ELI, Main ID Register, ELI on page B2-268 

Added CSV2 and CSV3 fields to register, | 82.62 JD_AA64PFRO_ELI, AArch64 Processor Feature Register 0, EL1 r2p0 
on page B2-229 

Added CSV? field to register. B2.78 ID_PFRO_EL1, AArch32 Processor Feature Register 0, EL1 r2p0 
on page B2-258 

Added TRCVMIDCCTLRO register D9.76 TRCVMIDCCTLRO, Virtual context identifier Comparator Control 12p0 

description. Register 0 on page D9-590 











Table B-4 Differences between Issue 0200-00 and Issue 0300-00 


























Change Location Affects 
Fixed typographical errors. Throughout document : 
Added new register ID AA64PFR1_EL1. B2.63 ID_AA64PFR1_EL1, AArch64 Processor Feature Register 1, EL1 r3p0 

~ = on page B2-231 
Updated reset value for ID PFR2 ELI. B2.4 AArch64 registers by functional group on page B2-136 13p0 
Updated reset value for MIDR_EL1I. B2.4 AArch64 registers by functional group on page B2-136 r3p0 
Updated reset value for TRCIDR1. D9.1 ETM register summary on page D9-497 r3p0 
Added SSBS field to ID_AA64PFR1_EL1. | B2.63 ID_AA64PFR1_EL1, AArch64 Processor Feature Register 1, EL1 13p0 

on page B2-231 











Table B-5 Differences between Issue 0300-00 and Issue 0301-00 





Change 


Location 


Affects 





Updated reset value for MIDR_EL1. 





B2.4 AArch64 registers by functional group on page B2-136 | r3p1 
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